Luca fdde4696e7 fix(maintenance): never block /admin/* with the maintenance screen ...

The previous wrapper gated /admin/* on a /auth/session check and only showed
the panel when an admin session was detected. Two failures:

1. The session check effect depended on `isAdminRoute` (a boolean), so the
   client-side login → dashboard navigation (both /admin/*) never re-ran it.
   hasAdminSession stayed stale-false from the logged-out /admin/login render,
   so a freshly logged-in admin landed on the maintenance screen anyway.
2. It also hid /admin/login itself (the catch-22).

Fix: the maintenance screen only blocks customer/gallery/public routes —
/admin/* is never blocked. The admin auth layer already handles access
(AdminLayout redirects a logged-out admin to /admin/login), so no session
probe is needed here. Removes the fragile /auth/session dependency entirely.

Backend skipPaths (/api/auth/admin/login + /api/auth/session) stays: login and
AdminAuthContext's token validation must still work during maintenance.

2026-06-13 14:18:02 +02:00

..

public

fix(csp): external bootstrap script to survive strict reverse-proxy CSP (#564)

2026-05-31 22:35:00 +02:00

scripts

feat(localization): add i18next extraction helper & refactor backup configuration component to tsx

2026-05-09 18:23:12 +02:00

src

fix(maintenance): never block /admin/* with the maintenance screen

2026-06-13 14:18:02 +02:00

.dockerignore

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

.env.example

fix(brand-title): runtime substitution so GHCR-image users can override (#521 follow-up)

2026-05-21 10:00:21 +02:00

.env.production.example

fix(brand-title): runtime substitution so GHCR-image users can override (#521 follow-up)

2026-05-21 10:00:21 +02:00

.gitignore

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

audit-frontend.json

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

docker-entrypoint.sh

fix(brand-title): runtime substitution so GHCR-image users can override (#521 follow-up)

2026-05-21 10:00:21 +02:00

Dockerfile

fix(brand-title): runtime substitution so GHCR-image users can override (#521 follow-up)

2026-05-21 10:00:21 +02:00

Dockerfile.dev

fix(security): scan triage cleanup — drop dead deps, harden Docker/nginx/postMessage

2026-05-07 22:31:51 +02:00

Dockerfile.prod

fix(security): resolve Docker image CVEs for code scanning alerts

2026-03-02 23:06:15 +01:00

eslint.config.js

Fix mobile overlay and deps per #43

2025-10-29 12:19:43 +01:00

i18next.config.ts

feat(localization): add i18next extraction helper & refactor backup configuration component to tsx

2026-05-09 18:23:12 +02:00

index.html

fix(branding): point HTML favicon link at /favicon.ico (the real Safari fix)

2026-06-03 19:01:55 +02:00

nginx.conf

fix(branding): serve favicon via backend route so Safari picks it up

2026-06-03 17:35:32 +02:00

nginx.dev.conf

fix(nginx): honour outer X-Forwarded-Proto when behind a reverse proxy (#547)

2026-05-22 13:32:01 +02:00

package-lock.json

feat(crm): frontend code — pages + services + components

2026-05-26 18:19:32 +02:00

package.json

chore(beta): release 3.60.6-beta.0

2026-06-10 16:38:01 +00:00

postcss.config.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

tailwind.config.js

feat(theme): expand color settings to 8-token CI palette + alt button

2026-05-05 16:04:43 +02:00

tsconfig.app.json

feat: overhaul public landing page and backup tooling

2025-09-19 16:39:18 +02:00

tsconfig.json

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

tsconfig.node.json

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

vite.config.ts

feat(crm): frontend code — pages + services + components

2026-05-26 18:19:32 +02:00

vitest.setup.ts

Fix admin reference mode regressions

2025-10-02 23:39:17 +02:00