6 Commits

Include renames

Author	SHA1	Message	Date
Paul NothaftandPaul Nothaft	84eab88801	test(e2e): read the admin JWT from the cookie, not the login body (#1073) ... Stable twin of #1071. Three specs acquire an admin token with `const body = await res.json(); return body.token`. On this branch too the admin login sets the JWT as the httpOnly `admin_token` cookie and responds with `res.json({ user })` — verified in auth.js on stable, not assumed from main — so the token is undefined and each spec fails at its first assertion, before exercising anything it was written to cover. Cookie and Authorization: Bearer are interchangeable server-side, so the helpers read the value back out of the context cookie jar and keep threading it as a Bearer. Every downstream call is unchanged. Verification is weaker than the main twin's, deliberately: the three spec files are byte-identical to the ones measured there (0 passed / 6 failed before, 3 passed / 3 failed after, against a live stack), and they compile and enumerate on this branch. Standing up a full stable compose stack to re-measure test-only changes was not worth it — say the word if you want that done before merge. The remaining failures are UI staleness, not auth, and are not addressed here. No CI workflow runs tests/e2e on this branch either, which is why this rotted unnoticed. Claude-Session: https://claude.ai/code/session_01Ra4hcsYiKuQLbbRsg6EjAc Co-authored-by: Paul Nothaft <[email protected]>	2026-08-18 22:14:15 +02:00
Paul Nothaft	31fd64c83c	Add short gallery URL toggle and token support (#38)	2025-10-15 07:21:09 +02:00
Paul Nothaft	775c5159ea	Add customer contact fields and admin API docs (refs #41)	2025-10-14 18:29:21 +02:00
Paul Nothaft	013be18d98	fix: clear notifications via API (#35)	2025-10-13 17:41:06 +02:00
Paul Nothaft	3c2a79a31a	feat: allow admin email updates in UI (#36)	2025-10-13 17:21:03 +02:00
paul	71e7179145	Harden auth cookies and fix native schema for event creation	2025-09-18 15:59:26 +02:00