|
|
25a766591e
|
feat: admin user management supports multi-identity bind/unbind
- users list: identity_count column (backend subquery)
- user detail: returns identities array
- POST /users/:id/identities, DELETE /users/:id/identities/:identityId
(owner protection, dup checks, keep >=1, audit logs)
- users page: identity column in table + manage section in edit modal
- API docs updated
|
2026-08-17 01:34:20 +08:00 |
|
|
|
6e9101a506
|
fix: deploy crash + multiple bug fixes + cleanup
- server.js: fix getSiteName() returning string when not installed causing
'getSiteName(...).then is not a function' crash on homepage (deploy blocker)
- server.js: auto-load business routes after install completes (no restart needed),
HTML cache keyed by api_key
- install: validate db name/email/password, trigger route loading after complete
- app.js: fix forgot/reset/verify pages rendering HomePage (missing page mapping)
- verify.js: support URL token auto-verification for external registration links
- auth: new email_code template for 6-digit code, reset_password template
(forgot-password was using verify_email template)
- upload.js: fix MP4 magic-bytes check using undefined buf variable
- tickets.js: status enum validation, anonymous submission rate limit
- security.js: XSS whitelist preserves email template HTML, strips scripts,
blocks javascript:/data: hrefs; CORS reject returns 403
- bans.js: allow clearing reason/duration, status enum validation
- users.js: fix req.user.role ReferenceError in create user modal
- home.js: tracking results now have detail view button
- .gitignore: ignore data/ (db credentials), logs, session files, temp scripts
|
2026-08-16 21:21:25 +08:00 |
|
|
|
c3cd97676e
|
fix: create user server toggle only shows for admin/owner, initial state correct
|
2026-07-17 00:07:58 +08:00 |
|
|
|
09f0d8f2aa
|
fix: 12 issues - admin permission scope, player sidebar nav, SMTP label, user create servers
|
2026-07-16 23:04:15 +08:00 |
|
|
|
a8309aa456
|
refactor: use user_servers junction table instead of JSON column
|
2026-07-15 04:55:57 +08:00 |
|
|
|
a34314ac9d
|
feat: admin server assignment in user management
|
2026-07-15 04:53:27 +08:00 |
|
|
|
efe6b084be
|
sync: add source field to user list, create, edit, and external API
|
2026-07-15 04:43:30 +08:00 |
|
|
|
021351d898
|
fix: restore from regex corruption, JS-bind modal close, data-action delegation
|
2026-07-15 03:53:16 +08:00 |
|
|
|
f0e891b17c
|
fix: data-action delegation + convert onclick to event listeners, sidebar+logout+modals
|
2026-07-15 02:44:18 +08:00 |
|
|
|
6657c05dec
|
fix: add escJs for JS string escaping in onclick attributes, apply to users/templates/notifications
|
2026-07-12 13:09:52 +08:00 |
|
|
|
247a4e851d
|
feat: MC Report System - MySQL + Express + Vanilla JS SPA
|
2026-07-12 01:23:19 +08:00 |
|
