Paul Nothaft 85a60a2dc7 fix(security): invalidate tokens on password change, enforce session timeout, fix role update ...

- Set password_changed_at when changing password via adminAuth route so
  existing JWT tokens are rejected by the auth middleware check
- Enforce session timeout on first request with unseen tokens by checking
  token iat against configured timeout (prevents bypass after server restart)
- Convert camelCase roleId/isActive to snake_case role_id/is_active in
  frontend updateUser service (fixes silent role update failures)

Resolves GHSA-rqg3-47p5-vgwg

2026-03-16 22:36:52 +01:00

..

assets

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

components

Merge main into beta for release/beta-to-main

2026-03-11 20:12:52 +01:00

config

Fix issues #31 #33 #34 #35 #36

2025-10-12 21:03:07 +02:00

contexts

feat: add admin dark mode and SEO/robots.txt settings

2026-02-06 23:26:01 +01:00

docs

chore: clean up codebase for production readiness

2025-08-24 23:19:30 +02:00

features/settings

Merge main into beta for release/beta-to-main

2026-03-11 20:12:52 +01:00

hooks

feat: add multi-administrator support with RBAC and fix backup/restore for S3

2026-01-07 17:10:46 +01:00

i18n

i18n: add missing Russian translations for thumbnails and photo dimensions

2026-03-15 19:48:41 +01:00

lib

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

pages

feat: add thumbnail settings UI to admin settings page (#206)

2026-03-04 22:55:14 +01:00

services

fix(security): invalidate tokens on password change, enforce session timeout, fix role update

2026-03-16 22:36:52 +01:00

styles

chore: clean up codebase for production readiness

2025-08-24 23:19:30 +02:00

types

feat: add update instructions dialog, email notifications, and capture date sorting

2026-02-16 16:23:57 +01:00

utils

fix: respect allowed_file_types setting for upload validation (#203)

2026-03-01 14:36:34 +01:00

App.tsx

feat: add admin dark mode and SEO/robots.txt settings

2026-02-06 23:26:01 +01:00

index.css

fix: resolve mixed light/dark mode styling in admin UI (#175)

2026-02-06 23:13:15 +01:00

main.tsx

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

vite-env.d.ts

feat: add admin dark mode and SEO/robots.txt settings

2026-02-06 23:26:01 +01:00