Repository navigation

Port security, CI and stability fixes from new-test-branch onto main - #279

Merged

KotapatiSaiMounika merged 33 commits into

OpenLake:mainfrom

KotapatiSaiMounika:port/test-branch-fixes

Oct 7, 2026

Commits on Oct 3, 2026

fix(backend): stop leaking password hash and salt in auth responses

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
63fa189
fix(backend): start server without Google OAuth credentials configured

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
cc304f5
chore(backend): fix eslint config and clear lint errors

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
704424f
fix(frontend): clear lint warnings so CI build passes

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
c7c3776
test(frontend): replace stale CRA boilerplate test with app smoke test

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
db5b1bc
docs: standardize backend port on 8000 in README and env example

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
4a947a5
feat(docker): inject REACT_APP_BACKEND_URL as a build arg for the frontend

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
1041ebd
fix(frontend): point PresidentDashboard at real backend endpoints

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
a5bf9bf
fix(frontend): provide SidebarProvider for direct /certificates route

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
68f165c
chore(frontend): remove incomplete flat eslint config

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
c2eb330
fix(frontend): add missing /api prefix to PresidentDashboard requests

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
ad12705
fix(backend): validate JWT_SECRET_TOKEN at boot

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
6a57a4c
fix(backend): bind profile photo and update to authenticated user

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
0627ea1
fix(backend): bind achievement and user-skill writes to authenticated user

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
0b649fd
fix(backend): gate feedback view to admins and bind feedback author

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
ecf22cd
fix(backend): role-gate position and position-holder creation

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
aad952a
fix(backend): restrict event update fields and derive role from session

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
c490aa0
fix(backend): restrict batch edits to the batch initiator

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
ebfad24
fix(frontend): render public events for guests and wrap in SidebarProvider

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
590658e
ci: pass SESSION_SECRET to backend, gate on health curl, fix EXPOSE

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
b6aea0f
ci: add root package.json with test/lint/build scripts and fix backend build

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
9322477
fix(backend): authenticate before authorizing club-coordinator analytics

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
17d3ae0
fix(frontend): remove dead service calls for /auth/google/register and /fetch

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
d233f28
fix(frontend): repair legacy home dashboard links and stats fetch

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
5261566
build(frontend): compile Tailwind v4 via CLI before build so utilities ship

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
f8309b7
fix(backend): remove duplicate /api/announcements mount

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
402801a
feat(backend): upload certificates to Cloudinary and generate before approving

Ashish-Kumar-Dash
authored and
KotapatiSaiMounika
committed
f80438d
Refactor renderPdf.js to use dynamic import for Puppeteer

UtkarshUmap
authored and
KotapatiSaiMounika
committed
c6cb516
Refactor certificate generation service

UtkarshUmap
authored and
KotapatiSaiMounika
committed
94cb110
Integrate MongoDB session store and update cookie settings

UtkarshUmap
authored and
KotapatiSaiMounika
committed
cda1989
chore(backend): allow dynamic import() in eslint config
KotapatiSaiMounika
committed
344ebfa

Navigation Menu

Repository navigation

Port security, CI and stability fixes from new-test-branch onto main - #279

Port security, CI and stability fixes from new-test-branch onto main#279
KotapatiSaiMounika merged 33 commits into
OpenLake:mainfrom
KotapatiSaiMounika:port/test-branch-fixes

Commits on Oct 3, 2026

fix(backend): stop leaking password hash and salt in auth responses

fix(backend): start server without Google OAuth credentials configured

chore(backend): fix eslint config and clear lint errors

fix(frontend): clear lint warnings so CI build passes

test(frontend): replace stale CRA boilerplate test with app smoke test

docs: standardize backend port on 8000 in README and env example

feat(docker): inject REACT_APP_BACKEND_URL as a build arg for the frontend

fix(frontend): point PresidentDashboard at real backend endpoints

fix(frontend): provide SidebarProvider for direct /certificates route

chore(frontend): remove incomplete flat eslint config

fix(frontend): add missing /api prefix to PresidentDashboard requests

fix(backend): validate JWT_SECRET_TOKEN at boot

fix(backend): bind profile photo and update to authenticated user

fix(backend): bind achievement and user-skill writes to authenticated user

fix(backend): gate feedback view to admins and bind feedback author

fix(backend): role-gate position and position-holder creation

fix(backend): restrict event update fields and derive role from session

fix(backend): restrict batch edits to the batch initiator

fix(frontend): render public events for guests and wrap in SidebarProvider

ci: pass SESSION_SECRET to backend, gate on health curl, fix EXPOSE

ci: add root package.json with test/lint/build scripts and fix backend build

fix(backend): authenticate before authorizing club-coordinator analytics

fix(frontend): remove dead service calls for /auth/google/register and /fetch

fix(frontend): repair legacy home dashboard links and stats fetch

build(frontend): compile Tailwind v4 via CLI before build so utilities ship

fix(backend): remove duplicate /api/announcements mount

feat(backend): upload certificates to Cloudinary and generate before approving

Refactor renderPdf.js to use dynamic import for Puppeteer

Refactor certificate generation service

Integrate MongoDB session store and update cookie settings

chore(backend): allow dynamic import() in eslint config

Commits on Oct 5, 2026

fix(frontend): don't crash ViewFeedback when no select handler is passed

revert: keep generate-after-approval flow from main (needs a safer design)