Jeppe Bundgaard
75c19bcce4
Fix MyWash active summary refresh import
2026-06-04 08:31:51 +02:00
Jeppe Bundgaard
458fe7399d
Persist MyWash sessions on start command
2026-06-04 08:18:31 +02:00
Jeppe Bundgaard
2b6a8eedcc
Avoid session creation on MyWash summary refresh
2026-06-04 08:07:40 +02:00
Jeppe Bundgaard
c0ed107f75
Resolve MyWash services from published config
2026-06-04 07:50:14 +02:00
Jeppe Bundgaard
30dceff0b5
Avoid self-serve preview sessions on eligibility reads
2026-06-04 06:55:59 +02:00
Jeppe Bundgaard
716929bd7b
Inject frontend commit SHA into Coolify runtime environment for manifest builds
2026-06-04 00:38:31 +02:00
Jeppe Bundgaard
1d43221b4d
Sync self-serve machine relay session state
2026-06-03 20:35:50 +02:00
Jeppe Bundgaard
33b7c3e51a
Widen self-serve task descriptions
2026-06-03 19:06:09 +02:00
Jeppe Bundgaard
1e64bd63b8
Update PHPUnit test results cache with latest version and defect counts
2026-06-03 18:19:45 +02:00
Jeppe B
bcbc2481c3
Source self-serve lane products from published config
2026-06-02 19:05:06 +02:00
Jeppe Bundgaard
1b99523366
Enhance self-serve lane functionality with new relay management and configuration updates
2026-06-02 17:27:22 +02:00
Jeppe Bundgaard
6d739cfebc
Add configuration for GitHub self-hosted runners
2026-06-02 11:25:00 +02:00
Jeppe Bundgaard
c23168afc5
Merge remote-tracking branch 'origin/master'
2026-06-02 10:29:25 +02:00
Jeppe Bundgaard
72704b7806
Add "Get My Active Self-Serve Wash" endpoint and corresponding tests
...
- Introduced a new `/modules/self-serve/lane/wash/my-active-wash` endpoint to retrieve the authenticated customer's active self-serve wash.
- Implemented authentication and permission checks for secure access.
- Added detailed response handling for various scenarios, including 401, 403, and 404 statuses.
- Extended API documentation and OpenAPI spec to support the new endpoint.
- Updated unit and API tests to validate endpoint functionality and route wiring.
2026-06-02 10:29:15 +02:00
Jeppe B
1468e43ce2
Merge pull request #272 from copenhagentruckwash/add-endpoint-to-resend-booking-confirmations
...
Add booking confirmation resend endpoint
2026-06-02 10:12:29 +02:00
copilot-swe-agent[bot]
c8804bc8dc
Merge master into branch resolving self-serve lane command conflicts
2026-06-02 08:01:46 +00:00
Jeppe B
b92d1f0bdf
Fix self-serve lane command API tests
2026-06-02 09:52:44 +02:00
Jeppe B
ac60596218
Fix booking confirmation resend test fixture
2026-06-02 09:36:36 +02:00
Jeppe B
f4b9d71d40
Merge pull request #270 from copenhagentruckwash/add-customer-self-serve-module-authorization-checks
...
Guard customer self-serve command fallback behind global module flag
2026-06-02 09:25:00 +02:00
Jeppe B
47068e6d7e
Add booking confirmation resend endpoint
2026-06-02 09:15:34 +02:00
Jeppe B
46bdeded78
Fix self-serve lane command customer authorization
2026-06-02 09:15:24 +02:00
Jeppe B
eefa521fc5
Guard customer self-serve commands behind module flag
2026-06-02 09:14:57 +02:00
Jeppe B
3e970d9cb9
Seed subuser session cache in API fixtures
2026-06-02 02:29:52 +02:00
Jeppe B
8c10c07cc9
Resolve Caddy replication bootstrap conflict
2026-06-02 02:25:29 +02:00
Jeppe B
18a8513b40
Use namespaced subuser object in API fixtures
2026-06-02 02:21:53 +02:00
Jeppe B
4c77b78c6c
Keep self-serve invoice billing customer authoritative
2026-06-02 02:15:27 +02:00
Jeppe B
bb249da477
Align API tests with hardened auth and department access
2026-06-02 02:09:14 +02:00
Jeppe B
eb16a4e6ce
Fix collected invoice queue count expectations
2026-06-02 02:00:35 +02:00
Jeppe B
a2e525fa9e
Update unit expectations for hardened flows
2026-06-02 01:53:58 +02:00
Jeppe B
0bf19c9d33
Restrict indexed department filters to scoped entities
2026-06-02 01:34:21 +02:00
Jeppe B
5850bfbce7
Keep autoload cache validation test compatible
2026-06-02 01:16:20 +02:00
Jeppe B
fd51a5b119
Fix search table argument ordering
2026-06-02 01:07:45 +02:00
Jeppe B
140365c8bb
Resolve PHP merge conflict test failures
2026-06-02 00:58:15 +02:00
copilot-swe-agent[bot]
d24b50f751
Plan: Resolve merge conflicts in index.php autoloader
2026-06-01 22:36:09 +00:00
Jeppe B
73b91ccec9
Merge pull request #265 from copenhagentruckwash/fix-unauthenticated-bird-voice-webhook
...
Reinstate authorization check for Bird inbound voice webhook
2026-06-02 00:33:43 +02:00
Jeppe B
0c809a19da
Merge pull request #257 from copenhagentruckwash/propose-fix-for-redis-image-cache-vulnerability
...
Limit Redis dynamic image caching to default variant only
2026-06-02 00:33:27 +02:00
Jeppe B
3a6685c345
Merge pull request #255 from copenhagentruckwash/fix-system-search-authorization-bypass
...
Enforce department scoping in system search for generic entities
2026-06-02 00:33:02 +02:00
Jeppe B
a60983f328
Merge pull request #266 from copenhagentruckwash/propose-fix-for-n8n-ssrf-vulnerability
...
Harden n8n webhook trigger URL validation against SSRF
2026-06-02 00:32:47 +02:00
Jeppe B
e2c2eb21cb
Harden n8n webhook trigger URL validation
2026-06-02 00:32:35 +02:00
copilot-swe-agent[bot]
51c619b0c6
Resolve merge conflicts in departmentLanesRoute.php
2026-06-01 22:29:49 +00:00
copilot-swe-agent[bot]
fe9daf1bf2
Merge remote-tracking branch 'origin/master' into fix-unauthenticated-bird-voice-webhook
...
# Conflicts:
# services/nginx/app/routes/birdVoiceWebhooksRoute.php
2026-06-01 22:27:40 +00:00
copilot-swe-agent[bot]
9c2d7140b4
Merge master into branch to resolve conflicts
2026-06-01 22:27:04 +00:00
copilot-swe-agent[bot]
1505464095
Plan: Resolve merge conflicts with master
2026-06-01 22:25:49 +00:00
Jeppe B
cc00fb2aed
Reinstate auth on Bird inbound voice webhook
2026-06-02 00:23:58 +02:00
Jeppe B
7f38cf2f7e
Merge pull request #264 from copenhagentruckwash/propose-fix-for-ssrf-in-workfeed-api
...
Restrict Workfeed API base URL to trusted hosts (prevent SSRF)
2026-06-02 00:22:35 +02:00
Jeppe B
d281dddbc1
Restrict Workfeed API base URL
2026-06-02 00:22:18 +02:00
Jeppe B
267ec1bed1
Merge pull request #263 from copenhagentruckwash/fix-machine-relay-set-endpoint-vulnerability
...
Guard machine relay set status
2026-06-02 00:21:49 +02:00
Jeppe B
a96f40cf13
Guard machine relay set status
2026-06-02 00:21:32 +02:00
Jeppe B
d6190626ce
Merge pull request #262 from copenhagentruckwash/fix-cross-tenant-job-data-exposure
...
Scope economic transfer queue jobs by creator
2026-06-02 00:20:48 +02:00
Jeppe B
ce8e6d0dab
Scope economic transfer queue jobs by creator
2026-06-02 00:20:30 +02:00