10 Commits

Include renames

Author	SHA1	Message	Date
brammie15	383ba32935	feat: add delete user and change password functioality	2026-10-22 23:19:56 +02:00
brammie15	4dae99786f	fix: image processing	2026-10-21 16:29:32 +02:00
brammie15	e7f59f7583	feat: make products server managed	2026-10-20 23:55:40 +02:00
brammie15	0ca9f4d16a	feat: make server own tabs	2026-10-20 16:18:36 +02:00
brammie15	1e4438ec5a	feat: add stuff	2026-10-20 14:45:22 +02:00
brammie15	fb6d26a468	feat: better reminder tab	2026-10-20 10:39:06 +02:00
brammie15	874f68b4b1	feat: add feature	2026-10-19 23:23:36 +02:00
brammie15	b336580040	feat: add realtime	2026-10-08 04:11:44 +02:00
brammie15	8b1e38cb4d	feat: reminders, Excel customer import and security hardening ... Features - Payment reminders via Resend (candidates, send, history, test email) - Bulk import of the customer list from Excel/CSV in the dashboard - Dashboard i18n (en/nl) with language selector Security - Enforce venue isolation on all /venues/:venueId routes - Require admin for planned-tab changes and pairing codes - Rate-limit login and device registration; opt-in TRUST_PROXY - Require JWT_SECRET in production; stop leaking internal errors - Escape customer names in reminder emails Sync and commands - Remove tabs the terminal no longer reports; validate nested sync payload - Return all pending commands on every sync (fixes missed-command race) - First command ack wins; atomic registration code claim - Reject commands for revoked devices, stale versions or duplicates - Remind only unpaid balances, with a 7-day cooldown Dashboard - Share a single token refresh across concurrent 401s (random logouts) - Keep the session alive for the refresh token lifetime Deployment - Replace `db push --accept-data-loss` with migrations (baselines legacy DBs) - Set NODE_ENV=production; pass Resend and TRUST_PROXY env in prod compose	2026-10-07 23:18:37 +02:00
brammie15	231b3e006a	batman	2026-09-19 22:19:35 +02:00