Maurice 658536c217 fix(trips): a member another member removed cannot rejoin through the invite link ...

Removing a member deleted their membership row only, and the invite link
checked nothing but its own token, so whoever kept the link walked straight
back in (GHSA-wr4c-964p-39jg).

trip_member_removals now notes who another member took off a trip. The invite
link refuses them on preview and on accept with a 403 that says so, old link
or regenerated, and the join page shows that instead of the join button.
Adding them back by name, or through a trip-bound invite or a plugin acting
for a member manager, lifts the note. Leaving a trip yourself leaves none, so
the link keeps working for whoever left and for everybody else.

2026-10-24 08:29:51 +02:00

..

e2e

fix(trips): a member another member removed cannot rejoin through the invite link

2026-10-24 08:29:51 +02:00

fixtures

feat(ski-routing): plan ski tours on the piste graphs of TREK Places

2026-10-20 21:13:48 +02:00

helpers

feat(assistant): hike, walk and route cards with their lines on the map, and "Plan this"

2026-10-22 21:34:14 +00:00

integration

fix(trips): a member another member removed cannot rejoin through the invite link

2026-10-24 08:29:51 +02:00

unit

fix(trips): a member another member removed cannot rejoin through the invite link

2026-10-24 08:29:51 +02:00

websocket

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

build-schema-snapshot.ts

refactor(db): open the database through a DatabaseLifecycle provider

2026-10-08 18:38:28 +02:00

global-setup.ts

refactor(db): open the database through a DatabaseLifecycle provider

2026-10-08 18:38:28 +02:00

setup.console-noise.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

setup.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00