chris 3330c47af2 fix: secure admin API endpoints with Bearer token auth ...

- main-site/server.js: add requireAuth middleware to POST /api/update-status
- gallery-backend/routes/photos.js: add requireAuth to upload, delete, and update routes
- admin/admin.js: send Authorization: Bearer header on all mutating requests (fetch + XHR upload); handle 401 on update-status and photo save
- docker-compose.yml: pass ADMIN_PASSWORD to gallery-backend; remove MongoDB public port mapping (27017:27017)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-08 08:30:58 -04:00

estore

fix: replace literal \u2014 escape with em dash in notes placeholder

2026-05-08 07:57:27 -04:00

main-site

fix: secure admin API endpoints with Bearer token auth

2026-05-08 08:30:58 -04:00

nginx

nginx: redirect /color-picker/* to /color/*

2026-04-15 14:32:25 -04:00

osrm

Major overhaul: shared nav, admin improvements, email enhancements, routing fixes

2026-04-14 21:14:06 -04:00

.env.example

Major overhaul: shared nav, admin improvements, email enhancements, routing fixes

2026-04-14 21:14:06 -04:00

.gitignore

Major overhaul: shared nav, admin improvements, email enhancements, routing fixes

2026-04-14 21:14:06 -04:00

docker-compose.yml

fix: secure admin API endpoints with Bearer token auth

2026-05-08 08:30:58 -04:00

Description

No description provided

185 MiB

Languages

TypeScript 49.7%

JavaScript 22%

HTML 12%

CSS 8.4%

Shell 7.2%

Other 0.7%