alexei.dolgolyov 215c8fdd46 fix: enforce API token scope on requests ...

- Add apiTokenScope to App.Locals type definition
- Store token scope in event.locals during API token auth
- Block write operations (POST/PATCH/PUT/DELETE) for read-scoped tokens
- Block admin paths for non-admin-scoped tokens
- Returns 403 with descriptive error message

2026-03-25 14:32:48 +03:00

.gitea/workflows

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

plans

feat: Phases 4-7 — Full Feature Expansion (26 features)

2026-03-25 14:18:10 +03:00

prisma

feat: Phases 4-7 — Full Feature Expansion (26 features)

2026-03-25 14:18:10 +03:00

src

fix: enforce API token scope on requests

2026-03-25 14:32:48 +03:00

static

feat: Phases 4-7 — Full Feature Expansion (26 features)

2026-03-25 14:18:10 +03:00

.dockerignore

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

.env.example

feat(phase3): PWA, auto-discovery, bookmarklet, multi-tab sync

2026-03-25 00:59:19 +03:00

.gitignore

chore: add plan files and gitignore for MVP feature

2026-03-24 19:46:26 +03:00

.prettierignore

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

.prettierrc

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

components.json

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

docker-compose.yml

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

Dockerfile

feat(mvp): phase 8 - integration, testing & deployment

2026-03-24 22:09:17 +03:00

eslint.config.js

feat: Phases 4-7 — Full Feature Expansion (26 features)

2026-03-25 14:18:10 +03:00

package-lock.json

feat: Phases 4-7 — Full Feature Expansion (26 features)

2026-03-25 14:18:10 +03:00

package.json

feat: Phases 4-7 — Full Feature Expansion (26 features)

2026-03-25 14:18:10 +03:00

PLAN_PROMPT.md

feat: Phases 4-7 — Full Feature Expansion (26 features)

2026-03-25 14:18:10 +03:00

svelte.config.js

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

tsconfig.json

feat(mvp): phase 1 - project scaffolding & tooling

2026-03-24 19:53:06 +03:00

vite.config.ts

fix: resolve runtime errors and missing routes

2026-03-24 22:39:23 +03:00

S

Description

No description provided

2.9 MiB

Releases 1

0.0.1 Latest

2026-04-10 21:23:00 +03:00

Languages

TypeScript 49.3%

Svelte 42%

HTML 7.1%

CSS 1.2%

JavaScript 0.2%

Other 0.2%