Michilis/Spanglish
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 5 Wiki Activity

security-update #23

Merged
Michilis merged 4 commits from security-update into main 2026-06-29 06:47:19 +00:00
Conversation 0 Commits 4 Files Changed 101
+9279 -6097
Michilis commented 2026-06-29 06:46:31 +00:00
Owner
Copy Link
Copy Source
No description provided.
Michilis added 4 commits 2026-06-29 06:46:31 +00:00
Harden auth, payments, and frontend against review findings. a6840ea953 
Close exploitable gaps in booking/payment flows, enforce token versioning and account checks, gate sensitive payment data, and add middleware plus input validation across admin routes.

Co-authored-by: Cursor <cursoragent@cursor.com>
Fix Lightning payment UI not updating after LNbits invoice is paid. f0e2de2834 
Ensure the booking page receives payment confirmation via a streaming SSE proxy, parallel status polling, and more reliable backend event delivery.

Co-authored-by: Cursor <cursoragent@cursor.com>
Refactor monolithic modules and harden booking, email, and auth infrastructure. 613bd7be1d 
Split oversized frontend API client, email service, and admin/booking pages into focused modules while preserving import surfaces, and add Redis-backed queues, stale booking cleanup, stronger auth, and scale deployment configs.

Co-authored-by: Cursor <cursoragent@cursor.com>
Add stable /next and /featured URLs that redirect to the current event. f5fe87613f 
These short links always resolve to the latest upcoming or featured event so they can be shared without updating when events rotate.

Co-authored-by: Cursor <cursoragent@cursor.com>
Michilis merged commit 194604004e into main 2026-06-29 06:47:19 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
Michilis
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Michilis/Spanglish#23