3 Commits

Author	SHA1	Message	Date
chris	3330c47af2	fix: secure admin API endpoints with Bearer token auth ... - main-site/server.js: add requireAuth middleware to POST /api/update-status - gallery-backend/routes/photos.js: add requireAuth to upload, delete, and update routes - admin/admin.js: send Authorization: Bearer header on all mutating requests (fetch + XHR upload); handle 401 on update-status and photo save - docker-compose.yml: pass ADMIN_PASSWORD to gallery-backend; remove MongoDB public port mapping (27017:27017) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-08 08:30:58 -04:00
chris	0576677523	feat: scroll-to-top button in estore; fix JS/CSS cache headers on main site ... - Add ScrollToTop component matching main site's green Top button (appears after 130px scroll, same styling and font) - Fix main-site server.js: JS/CSS now use max-age=3600 + must-revalidate instead of 30d immutable — changes reach users within 1 hour instead of being stuck in browser cache for a month - Images/fonts keep 30d immutable (safe, as they are content-addressed) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-15 14:41:42 -04:00
chris	746868d720	Add 'main-site/' from commit '5cefb4d1618bc54ae0e86830421a8c911900302c' ... git-subtree-dir: main-site git-subtree-mainline: 4d1daa39101c0a85ca6d916f1c31139faf39632a git-subtree-split: 5cefb4d1618bc54ae0e86830421a8c911900302c	2026-04-13 19:22:17 -04:00