Skip to content

Harden frontend - #55

Merged
hawkinslabdev merged 13 commits into
mainfrom
design/1.5
Oct 18, 2026
Merged

hawkinslabdev merged 13 commits into
mainfrom
design/1.5

Conversation

@hawkinslabdev

Copy link
Copy Markdown
Collaborator

No description provided.

- refactor: replace inline style attributes and js style writes with css classes
- feat: add spacing, type, radius and status tokens to site.css
- refactor: share style tokens with consent, embed and status pages
- fix: remove style-src unsafe-inline from admin csp except scalar
- fix: end sse event stream on application stopping
- style: drop column-aligned whitespace in c# files
@hawkinslabdev hawkinslabdev self-assigned this Oct 18, 2026
- fix: render dismiss button on login and logout announcement bar
- refactor: share announcement bar markup and dismissal between login and admin
- style: position close button at the bar edge, bark style
- fix: remember dismissal per announcement text across sessions
- fix: reserve admin and apikeyuser usernames, case-insensitive
- fix: return the admin key session from /users/me, not a same-named user
- fix: exclude other-user credential fields from password manager autofill
- style: use chevron side button for the rest api connector row
- test: cover reserved usernames
- fix: name api key principals key:{name} so they never match a username
- feat: expand the sidebar bucket list in place and remember the choice
- fix: scroll the bucket list while modules and the sidebar footer stay visible
- test: cover api key principal naming
- feat: sort and search the overview bucket table by name, label and records
- feat: sort bucket records and subscribers by name
- fix: sort bucket records by decrypted email, not by hash
- fix: search the whole bucket when sorting by email or name
- fix: list records without a name or email last
- chore: make populate bucket count and email range configurable
- fix: revoke the session token on logout and reject revoked tokens
- fix: purge expired used and revoked tokens in the data policy run
- refactor: write all exports through one schema in csv, json, xml and yaml
- fix: export utc iso 8601 timestamps, unchanged permission names and custom fields
- fix: write csv with utf-8 bom and crlf, quote yaml strings
- refactor: use btn-square for toolbar icon buttons
- test: cover session revocation and export writer
@hawkinslabdev
hawkinslabdev merged commit c4b45f7 into main Oct 18, 2026
1 check passed
@hawkinslabdev
hawkinslabdev deleted the design/1.5 branch October 18, 2026 20:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant