Maurice be751ad521 fix(auth): start no new session for a password change over a Bearer token ...

A password change ends every session of the user and re-issues one for
the device it was made on, handed out as the session cookie. A caller
that authenticated with a Bearer token never reads that cookie, so the
new session sat in the session list as a live device nobody held until
it expired.

The controller now asks for the replacement session only when the
request came with the session cookie, the same check the sliding
renewal makes. The response body is unchanged.

2026-10-08 18:44:08 +02:00

..

app-config

refactor(server): inject the transit base URL and the kitinerary paths as config tokens

2026-10-08 18:41:01 +02:00

db

fix(sessions): keep an ended session's row until it expires

2026-10-08 18:44:08 +02:00

demo

fix(sessions): carry the signed-in sessions across a demo reset and a restore

2026-10-08 18:43:42 +02:00

mcp

feat(server): correlate log lines with a request id per entry point

2026-10-08 18:40:15 +02:00

middleware

test(server): pin the request id through the body parsers

2026-10-08 18:41:01 +02:00

nest

fix(auth): start no new session for a password change over a Bearer token

2026-10-08 18:44:08 +02:00

nest-mcp

feat(server): correlate log lines with a request id per entry point

2026-10-08 18:40:15 +02:00

systemNotices

Feat/orm : mikroorm (#2416)

2026-10-06 19:27:30 +02:00

typings

feat(server): read visits and recorded routes from Dawarich

2026-09-12 23:36:49 +02:00

utils

chore(server): spell out the coverage pin and drop a dash from the redirect note

2026-10-08 13:04:39 +02:00

addons.ts

feat(tours): add non-motorized day tour planning

2026-10-04 12:59:55 +02:00

bootstrap.ts

feat(server): add last-resort error handlers, a draining readiness probe and proxy keep-alive

2026-10-08 18:40:37 +02:00

config.ts

refactor(server): resolve the data directory in one place

2026-10-08 18:40:15 +02:00

index.ts

feat(server): add last-resort error handlers, a draining readiness probe and proxy keep-alive

2026-10-08 18:40:37 +02:00

mikro-orm.config.ts

Feat/orm : mikroorm (#2416)

2026-10-06 19:27:30 +02:00

plugin-event-sink.ts

Fix/plugin audit findings (#2031)

2026-08-24 23:48:36 +02:00

plugin-mcp-tools.ts

Feat/orm : mikroorm (#2416)

2026-10-06 19:27:30 +02:00

plugin-user-lifecycle.ts

Feat/orm : mikroorm (#2416)

2026-10-06 19:27:30 +02:00

shutdown.ts

feat(server): add last-resort error handlers, a draining readiness probe and proxy keep-alive

2026-10-08 18:40:37 +02:00

types.ts

Merge dev into feat/tours and port Tours onto MikroORM

2026-10-06 22:43:09 +02:00

websocket.ts

fix: a trashed note file leaves its note, quieter MCP sweep, bounded compose logs

2026-10-07 16:47:53 +02:00