beachPartyBalloons

chris/beachPartyBalloons

Fork 0

Commit Graph

Author	SHA1	Message	Date
chris	3330c47af2	fix: secure admin API endpoints with Bearer token auth - main-site/server.js: add requireAuth middleware to POST /api/update-status - gallery-backend/routes/photos.js: add requireAuth to upload, delete, and update routes - admin/admin.js: send Authorization: Bearer header on all mutating requests (fetch + XHR upload); handle 401 on update-status and photo save - docker-compose.yml: pass ADMIN_PASSWORD to gallery-backend; remove MongoDB public port mapping (27017:27017) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-08 08:30:58 -04:00
chris	746868d720	Add 'main-site/' from commit '5cefb4d1618bc54ae0e86830421a8c911900302c' git-subtree-dir: main-site git-subtree-mainline: 4d1daa39101c0a85ca6d916f1c31139faf39632a git-subtree-split: 5cefb4d1618bc54ae0e86830421a8c911900302c	2026-04-13 19:22:17 -04:00

Author

SHA1

Message

Date

chris

3330c47af2

fix: secure admin API endpoints with Bearer token auth

- main-site/server.js: add requireAuth middleware to POST /api/update-status
- gallery-backend/routes/photos.js: add requireAuth to upload, delete, and update routes
- admin/admin.js: send Authorization: Bearer header on all mutating requests (fetch + XHR upload); handle 401 on update-status and photo save
- docker-compose.yml: pass ADMIN_PASSWORD to gallery-backend; remove MongoDB public port mapping (27017:27017)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-08 08:30:58 -04:00

chris

746868d720

Add 'main-site/' from commit '5cefb4d1618bc54ae0e86830421a8c911900302c'

git-subtree-dir: main-site
git-subtree-mainline: 4d1daa39101c0a85ca6d916f1c31139faf39632a
git-subtree-split: 5cefb4d1618bc54ae0e86830421a8c911900302c

2026-04-13 19:22:17 -04:00

2 Commits