83 Commits

Include renames

Author	SHA1	Message	Date
github-actions[bot]	0acce6ab08	chore: sync package.json versions to 2.1.1	2026-01-07 21:24:07 +00:00
github-actions[bot]	a19e218e40	chore: sync package.json versions to 2.1.0	2026-01-07 20:54:46 +00:00
Paul Nothaft	16b3ab039a	feat: Multi-administrator RBAC, CSS templates & security hardening (#78) ... - Add multi-administrator support with role-based access control - Add CSS template system with Apple Liquid Glass designs - Add CSS template selector to event editing - Fix photo category selection and feedback button visibility (#77) - Security hardening and Alpine base image upgrade	2026-01-07 21:53:25 +01:00
Paul Nothaft	892e47d017	feat: add multi-administrator support with RBAC and fix backup/restore for S3 ... ## Multi-Administrator System - Add role-based access control (RBAC) with predefined roles (Super Admin, Admin, Editor, Viewer) - Add granular permissions system for all admin operations - Add admin user management page with invite functionality - Add email invitation system for new administrators - Add permission middleware protecting all admin routes - Add PermissionGate component for frontend permission checks - Track event creator (created_by) for audit purposes ## Backup & Restore Fixes - Fix S3 backup: endpoint URL handling, manifest loading, field name compatibility - Fix S3 restore: add list-backups endpoint, transform S3 config from frontend format - Fix PostgreSQL compatibility: add .returning('id') for insert operations - Fix disk space check: use df command, handle unknown space gracefully - Fix dry-run validation to not block on warnings - Fix req.user → req.admin in restore routes ## Database Migrations - 054: Add roles table with predefined roles - 055: Add permissions table - 056: Add role_permissions junction table - 057: Add role_id to admin_users - 058: Add admin_invitations table - 059: Add admin email templates - 060: Add created_by to events table ## Other Improvements - Update .gitignore to exclude planning docs and local backup directory - Remove SQLite database file from tracking - Add i18n translations for user management (EN/DE)	2026-01-07 17:10:46 +01:00
github-actions[bot]	007e46edb9	chore: sync package.json versions to 2.0.0	2026-01-03 22:57:16 +00:00
Claude	68a9dc5749	Add comprehensive video support to galleries ... This commit implements full video upload, storage, streaming, and playback functionality for the PicPeak photo sharing platform, allowing users to upload and view videos alongside photos in galleries. Backend Changes: - Added video processing dependencies (fluent-ffmpeg, @ffmpeg-installer/ffmpeg) - Created videoProcessor.js service for video metadata extraction and thumbnail generation - Updated photoProcessor.js to handle both images and videos - Modified adminPhotos.js to accept video files with 500MB size limit - Enhanced gallery.js with HTTP range request support for video streaming - Expanded fileSecurityUtils.js with video MIME types and magic number validation - Added database migration for video support columns (media_type, duration, codecs, dimensions) Frontend Changes: - Updated TypeScript types to include video metadata fields - Created VideoPlayer.tsx component with custom controls - Modified PhotoUpload.tsx to accept video files (.mp4, .webm, .mov, .avi) - Updated UserPhotoUpload.tsx for guest video uploads - Enhanced PhotoGrid.tsx with video badges and duration display - Modified PhotoLightbox.tsx to conditionally render VideoPlayer for videos Database Schema: - Added media_type column ('image' | 'video') - Added mime_type, duration, video_codec, audio_codec columns - Added width and height columns for media dimensions - Migrated existing photos to media_type 'image' Features: - Video thumbnail generation from video frames - Streaming support with range requests for efficient playback - Video duration display on thumbnails - Play button indicators on video items - Full-featured video player with playback controls - Support for MP4, WebM, MOV, and AVI formats	2025-11-28 17:53:56 +01:00
paul	bce5f749b1	Merge remote-tracking branch 'upstream/main'	2025-11-25 22:43:48 +02:00
Claude	14c4bc17f3	Fix security vulnerabilities detected by Trivy ... - CVE-2025-64756: glob CLI command injection - added override to use glob ^11.1.0 - CVE-2025-13466: body-parser DoS - added override to use body-parser ^2.2.1 - CVE-2025-64718: js-yaml prototype pollution - updated to js-yaml ^4.1.1 - BusyBox vulnerabilities (netstat, tar) - added apk upgrade to all Dockerfiles Changes: - backend/package.json: Updated js-yaml, added overrides for glob, body-parser - frontend/package.json: Added overrides for glob, js-yaml - All Dockerfiles: Added 'apk upgrade --no-cache' to get latest security patches - backend/Dockerfile.dev: Updated from node:18-alpine to node:20-alpine	2025-11-25 20:35:59 +00:00
Gitea Actions Bot	f29e9db99d	chore: bump version to 1.1.15 (backend + frontend)	2025-10-29 11:30:46 +00:00
paul	69538b86ea	Fix mobile overlay and deps per #43	2025-10-29 12:19:43 +01:00
Gitea Actions Bot	b76e45cb54	chore: bump version to 1.1.14 (backend + frontend)	2025-10-20 12:41:34 +00:00
Gitea Actions Bot	07759a0e40	chore: bump version to 1.1.13 (backend + frontend)	2025-10-15 05:29:19 +00:00
Paul Nothaft	52f8f1f738	Upgrade nodemailer to 7.0.7 (GHSA-mm7p-fcc7-pg87)	2025-10-13 21:11:38 +02:00
Paul Nothaft	e731e7b47c	Address tar-fs CVE-2025-59343	2025-10-13 21:09:52 +02:00
Gitea Actions Bot	f20472ca26	chore: bump version to 1.1.11 (backend + frontend)	2025-10-12 19:23:19 +00:00
Gitea Actions Bot	87f4526220	chore: bump version to 1.1.10 (backend + frontend)	2025-10-12 19:18:37 +00:00
Gitea Actions Bot	d42a11680f	chore: bump version to 1.1.9 (backend + frontend)	2025-10-06 13:18:43 +00:00
Gitea Actions Bot	38dd74b893	chore: bump version to 1.1.8 (backend + frontend)	2025-10-03 05:19:52 +00:00
Gitea Actions Bot	2fe32e9a69	chore: bump backend version to 1.1.5	2025-09-27 05:59:32 +00:00
Gitea Actions Bot	fb739f221d	chore: bump version to 1.1.4 (backend + frontend)	2025-09-24 15:39:34 +00:00
Gitea Actions Bot	a4595e2ab2	chore: bump backend version to 1.1.3	2025-09-22 20:50:54 +00:00
Gitea Actions Bot	cab5b0d795	chore: bump backend version to 1.1.2	2025-09-22 17:08:29 +00:00
Gitea Actions Bot	e0865b81b6	chore: bump backend version to 1.1.1	2025-09-21 20:47:47 +00:00
paul	39d2244e1e	chore: switch versioning workflows to manual triggers	2025-09-19 22:31:55 +02:00
Gitea Actions Bot	eb626be22c	chore: bump version to 1.0.130 (backend + frontend)	2025-09-19 14:47:37 +00:00
paul	2a4d38813f	feat: overhaul public landing page and backup tooling	2025-09-19 16:39:18 +02:00
Gitea Actions Bot	ad9c6d63d3	chore: bump backend version to 1.0.129	2025-09-18 14:54:28 +00:00
Gitea Actions Bot	e51347d0a1	chore: bump version to 1.0.128 (backend + frontend)	2025-09-18 14:05:43 +00:00
paul	71e7179145	Harden auth cookies and fix native schema for event creation	2025-09-18 15:59:26 +02:00
Gitea Actions Bot	bda76ff513	chore: bump backend version to 1.0.125	2025-09-18 10:49:54 +00:00
Gitea Actions Bot	0d77a3a0a8	chore: bump version to 1.0.124 (backend + frontend)	2025-09-14 14:25:37 +00:00
Gitea Actions Bot	aa9b3a0227	chore: bump version to 1.0.123 (backend + frontend)	2025-09-14 13:53:37 +00:00
Gitea Actions Bot	05ebaaeedb	chore: bump version to 1.0.122 (backend + frontend)	2025-09-09 18:54:09 +00:00
Gitea Actions Bot	6a4b549d9f	chore: bump version to 1.0.121 (backend + frontend)	2025-09-09 18:45:28 +00:00
Gitea Actions Bot	531831e84b	chore: bump backend version to 1.0.120	2025-09-09 18:28:39 +00:00
Gitea Actions Bot	4264026bbe	chore: bump backend version to 1.0.119	2025-09-09 18:06:15 +00:00
Gitea Actions Bot	ba825823a0	chore: bump backend version to 1.0.118	2025-09-09 17:58:50 +00:00
Gitea Actions Bot	8404125ff0	chore: bump version to 1.0.117 (backend + frontend)	2025-09-09 17:10:38 +00:00
Gitea Actions Bot	9fd6b44487	chore: bump version to 1.0.116 (backend + frontend)	2025-09-09 15:47:41 +00:00
Gitea Actions Bot	f2abb40987	chore: bump version to 1.0.115 (backend + frontend)	2025-09-09 15:32:47 +00:00
Gitea Actions Bot	4aa0ff705f	chore: bump version to 1.0.114 (backend + frontend)	2025-09-09 15:25:05 +00:00
Gitea Actions Bot	448882cfef	chore: bump version to 1.0.113 (backend + frontend)	2025-09-09 13:31:10 +00:00
Gitea Actions Bot	798f6211e0	chore: bump version to 1.0.112 (backend + frontend)	2025-09-09 09:46:52 +00:00
Gitea Actions Bot	afeb35a446	chore: bump version to 1.0.111 (backend + frontend)	2025-09-06 07:22:38 +00:00
Gitea Actions Bot	78ab0ad2e9	chore: bump version to 1.0.110 (backend + frontend)	2025-09-05 22:06:43 +00:00
Gitea Actions Bot	1d826accdc	chore: bump version to 1.0.109 (backend + frontend)	2025-09-05 13:07:58 +00:00
Gitea Actions Bot	f7a8765f58	chore: bump version to 1.0.108 (backend + frontend)	2025-09-02 15:46:57 +00:00
Gitea Actions Bot	0881a0fa71	chore: bump version to 1.0.106 (backend + frontend)	2025-09-01 21:03:36 +00:00
Gitea Actions Bot	7b517fa290	chore: bump version to 1.0.105 (backend + frontend)	2025-08-29 20:28:39 +00:00
Gitea Actions Bot	0c283717cb	chore: bump version to 1.0.104 (backend + frontend)	2025-08-29 20:13:18 +00:00