7 Commits

Include renames

Author	SHA1	Message	Date
admin	22fd5fb2cc	TenantAssignment and readside filtering	2026-04-26 22:58:30 +02:00
admin	7c4e20099d	Role split and owner gating	2026-04-26 22:45:38 +02:00
admin	f0eca1959b	fix(portal): security hardening for pilot readiness ... - C1: Rewrite /api/usage to resolve teamId server-side from tenant CR; customers can no longer pass arbitrary teamId (IDOR fix) - C2: Remove POST /api/tenants — tenants are only created via admin approval flow - H1: Validate packages against catalog, workspaceFiles against allowlist, and field lengths in PATCH /api/tenants/[name] - H2: Remove full ZITADEL profile claims logging from JWT callback - H3: Add safeError() utility; sanitize all error responses to clients, toggle raw errors via PORTAL_DEBUG_ERRORS=true - H4/H5: Escape HTML entities in all email templates (contactName, companyName, adminNotes)	2026-04-14 20:20:04 +02:00
admin	dbfa7560cf	All the channel approval	2026-04-12 13:47:27 +02:00
admin	c67259ebe0	All the UI fixes for now	2026-04-11 17:21:52 +02:00
admin	f20d5f09ae	Working version 6.2	2026-04-10 14:44:03 +02:00
admin	d526c1ff4a	Add initial Portal version	2026-04-09 22:16:22 +02:00