beachPartyBalloons

Go to file

chris 1a1fe7044a Fix admin gallery auth: use X-Admin-Password header instead of Authorization Bearer

NPMplus proxy strips the Authorization header before it reaches the backend,
causing all write operations to return 401. Switch to a custom X-Admin-Password
header which passes through the proxy unmodified.

- backend/routes/photos.js: requireAuth checks X-Admin-Password first, falls
  back to Authorization Bearer for compatibility
- backend/server.js: add X-Admin-Password to CORS allowedHeaders
- admin/admin.js: send X-Admin-Password instead of Authorization Bearer
  in all fetch calls and XHR upload requests

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-27 10:13:36 -04:00

estore

BouquetPicker: balloon swatches for latex color picker, wider modal, sticky mylar tray

2026-06-24 10:09:52 -04:00

main-site

Fix admin gallery auth: use X-Admin-Password header instead of Authorization Bearer

2026-06-27 10:13:36 -04:00

nginx

Fix Apple Pay verification file — serve directly from nginx

2026-05-29 06:47:06 -04:00

osrm

Major overhaul: shared nav, admin improvements, email enhancements, routing fixes