4 Commits

Include renames

Author	SHA1	Message	Date
admin	7b22bc4087	OneLiteLLM team per company+virt keys	2026-04-26 21:21:02 +02:00
admin	f0eca1959b	fix(portal): security hardening for pilot readiness ... - C1: Rewrite /api/usage to resolve teamId server-side from tenant CR; customers can no longer pass arbitrary teamId (IDOR fix) - C2: Remove POST /api/tenants — tenants are only created via admin approval flow - H1: Validate packages against catalog, workspaceFiles against allowlist, and field lengths in PATCH /api/tenants/[name] - H2: Remove full ZITADEL profile claims logging from JWT callback - H3: Add safeError() utility; sanitize all error responses to clients, toggle raw errors via PORTAL_DEBUG_ERRORS=true - H4/H5: Escape HTML entities in all email templates (contactName, companyName, adminNotes)	2026-04-14 20:20:04 +02:00
admin	f20d5f09ae	Working version 6.2	2026-04-10 14:44:03 +02:00
admin	d526c1ff4a	Add initial Portal version	2026-04-09 22:16:22 +02:00