TroodonEnjoyer
1b5f244f28
Login possible fix and something else I can't remember
2026-06-26 19:39:45 +02:00
TroodonEnjoyer
bccba1434b
ATTEMPTED to fix my databse stuff, security etc, and a Issue Cait had
2026-06-26 18:37:28 +02:00
caitlin
fb99b49686
Fix for route
2026-06-26 16:53:37 +02:00
caitlin
75746f4cab
Merge remote-tracking branch 'origin/main' into master
2026-06-26 16:47:37 +02:00
caitlin
ec8207fca7
Update login page styling and sidebar collapse logo
2026-06-26 16:22:28 +02:00
7a76841309
Current state
2026-06-26 14:31:38 +02:00
Hannah_Bagga
1465016b56
.....
2026-06-25 15:15:35 +02:00
Ace
1adc4806fa
Files Changed
...
Security Fixes
File Change
.env.local Placeholder JWT secret (rotate to random value: openssl rand -base64 64)
src/middleware.ts Removed /api/auth/me bypass; API routes return JSON 401 (not 302 redirect)
src/lib/auth.ts sameSite: "lax" → "strict" (create + destroy cookie); SVG name chars are pre-computed (no injection)
src/lib/avatar.ts Added sanitizeName() — strips non-alphanumeric/safe chars, max 50 chars
src/app/api/users/route.ts POST restricted to super_admin; validates role against whitelist ["sales","admin","super_admin","dev"]; validates active defaults to true
src/app/api/users/[id]/route.ts DELETE restricted to super_admin; blocks self-deletion
src/app/api/leads/[id]/route.ts GET: non-admin users filtered by assigned_to; PATCH: ownership check + score validated 0-100 range
src/app/api/leads/route.ts DELETE: ownership + admin check; GET: ownership filter for non-admin users
src/app/api/conversations/[id]/messages/route.ts GET/POST: verify user is a conversation_participant before access
rust-ai/src/main.rs CORS: AllowOrigin::list(["localhost:3006", "127.0.0.1:3006"]) (was Any)
Performance Fixes
File Change
src/app/api/leads/route.ts Added limit (default 50), offset query params; ownership filter in SQL
src/app/api/users/route.ts Added limit (default 50), offset query params
src/app/api/conversations/route.ts Added LIMIT 50
src/app/api/leads/[id]/notes/route.ts Added limit (default 50), offset query params
src/app/api/conversations/[id]/messages/route.ts Added limit (default 100), offset, before query params
src/app/(dashboard)/chats/page.tsx Pruned to 5 cached conversations; useMemo wraps messages/conversation/filteredConversations; otherParticipant moved outside component; added 10MB file size limit; recordingChunksRef cleared on discard
src/app/(dashboard)/leads/[id]/page.tsx Optimistic status update rolls back on fetch failure
database/migrations/003_chat.sql Added composite index idx_messages_conversation_created on (conversation_id, created_at DESC)
Code Quality Fixes
File Change
src/lib/ai.ts Removed dead getInstructions()/updateInstructions() (called nonexistent /ai/instructions)
src/lib/auth.ts bcrypt.hash(password, 12) — kept (acceptable, OWASP-recommended)
src/app/login/page.tsx "Forgot password?" button now shows alert to contact admin (was no-op)
src/components/users/user-form-dialog.tsx Password min 6 → 8 chars
26 silent catch {} blocks across 16 files (see below) Added console.warn("...") context messages
2026-06-23 09:45:30 +02:00
Ace
571af27f50
added update from code pull new changes now
2026-06-19 10:19:57 +02:00
William_Britz
e5726fdbb2
Merge branch 'main' of https://git.coastit.co.za/caitlin/CRM_ENVR
2026-06-19 09:53:52 +02:00
William_Britz
ebc29c47a4
ANYTHING
2026-06-19 09:52:24 +02:00
Ace
6ffbc7c9b4
uh added some stuff forgot got drunk
2026-06-18 23:04:20 +02:00
Ace
adbcc4b9af
feat: add system monitor component and API for performance metrics
...
feat: implement conversations API with message retrieval and posting
feat: add avatar URL handling for users and update user role definitions
feat: create chat system tables in the database with initial seed data
fix: update user roles from "sales_user" to "sales" for consistency
chore: add middleware for system API route access
fixed fuckups on john's side, added a benchmark
Made Graphs actualy load from database and realtime data, graphs will update and percentages will be mathematically made, and made realtime
added chatcart edits, made graphs glow.
added in some little small home feeling fuctions
added in a slide show, in login with qoutes from creators because i want to leave a print on it saying we made this shit, we built it brick for brick
login page added qoutes some random, and made them shuffle from left to right one dissapears other come in
adding shape to the textbox for the qoutes
Fixed my chat fuckups when it comes to chats
2026-06-18 22:48:03 +02:00
William_Britz
e7e4d371c2
Updated Login
2026-06-18 16:12:10 +02:00
William_Britz
b19a00c6c2
Updated the Login
2026-06-18 16:10:02 +02:00
TroodonEnjoyer
5238b59140
Added 4 Demo Users, with Coast emails, Hierarchy, roles etc.
2026-06-18 13:13:29 +02:00
Ace
d6d784cef3
Added in Logo's and worked on Avatars and Chats
2026-06-17 16:26:32 +02:00
caitlin
4898bf7142
Initial commit
2026-06-17 13:51:22 +02:00
TroodonEnjoyer
caitlin
Chariah
Hannah_Bagga
Ace
William_Britz