trails-cool/trails
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
trails/apps/journal/app/routes
History
Ullrich Schäfer 067e2ebd0b
fix: enforce Terms gate on bearer-token API requests 
Mobile API requests authenticated via OAuth2 bearer tokens bypassed the
Terms gate that the root loader applies to web cookie sessions. Extend
requireApiUser to compare the user's termsVersion with TERMS_VERSION
and return a structured 403 { code: "TERMS_OUTDATED", currentTermsVersion }
on mismatch so mobile clients can surface their own re-acceptance UI.

Spec delta on journal-auth captures the new requirement.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-08 01:59:28 +02:00
..
activities.$id.tsx Apply public-content-visibility: visibility flag + public profile 2026-04-19 09:11:39 +02:00
activities._index.tsx Add ClientMap wrapper to avoid lazy() SSR resolution 2026-04-06 22:52:57 +02:00
activities.new.tsx Implement Journal activity feed (Group 10) 2026-03-24 23:20:04 +01:00
api.auth.login.ts Add 6-digit login code for mobile authentication 2026-04-15 20:56:42 +02:00
api.auth.register.ts Implement notifications + supporting fixes 2026-04-26 01:28:55 +02:00
api.events.ts Implement notifications + supporting fixes 2026-04-26 01:28:55 +02:00
api.follows.$id.approve.ts Locked-account profiles: private = stub + Pending follow flow 2026-04-25 23:38:26 +02:00
api.follows.$id.reject.ts Locked-account profiles: private = stub + Pending follow flow 2026-04-25 23:38:26 +02:00
api.metrics.ts Add observability: health endpoints, structured logging, metrics, Grafana stack 2026-03-26 22:59:44 +01:00
api.notifications.$id.read.ts Implement notifications + supporting fixes 2026-04-26 01:28:55 +02:00
api.notifications.read-all.ts Implement notifications + supporting fixes 2026-04-26 01:28:55 +02:00
api.routes.$id.callback.ts Fix CORS on Planner→Journal callback endpoint 2026-03-25 01:16:32 +00:00
api.routes.$id.edit-in-planner.ts Sync notes through GPX, Journal, and Planner roundtrip 2026-04-11 03:35:40 +02:00
api.routes.$id.gpx.ts Add route detail day segment highlighting and per-day GPX export 2026-04-11 00:44:11 +02:00
api.settings.delete-account.ts Add account settings page with passkey management 2026-03-29 10:09:06 +02:00
api.settings.email.ts Add account settings page with passkey management 2026-03-29 10:09:06 +02:00
api.settings.passkey.delete.ts Add account settings page with passkey management 2026-03-29 10:09:06 +02:00
api.settings.profile.ts Implement social-feed: local follows + /feed + profile visibility 2026-04-25 22:51:18 +02:00
api.sync.callback.$provider.ts Wahoo capability adapters + caller migration (groups 3-5) 2026-05-08 01:25:33 +02:00
api.sync.connect.$provider.ts Wahoo capability adapters + caller migration (groups 3-5) 2026-05-08 01:25:33 +02:00
api.sync.disconnect.$provider.ts Wahoo capability adapters + caller migration (groups 3-5) 2026-05-08 01:25:33 +02:00
api.sync.push.$provider.$routeId.ts Wahoo capability adapters + caller migration (groups 3-5) 2026-05-08 01:25:33 +02:00
api.sync.webhook.$provider.ts Wahoo capability adapters + caller migration (groups 3-5) 2026-05-08 01:25:33 +02:00
api.users.$username.follow.ts Implement social-feed: local follows + /feed + profile visibility 2026-04-25 22:51:18 +02:00
api.users.$username.unfollow.ts Implement social-feed: local follows + /feed + profile visibility 2026-04-25 22:51:18 +02:00
api.v1.activities.$id.ts Implement Journal REST API v1 endpoints 2026-04-13 00:57:27 +02:00
api.v1.activities._index.ts DRY up ZodError → FieldError mapping 2026-04-19 11:45:09 +02:00
api.v1.auth.devices.$id.ts Implement Journal REST API v1 endpoints 2026-04-13 00:57:27 +02:00
api.v1.auth.devices.ts Implement Journal REST API v1 endpoints 2026-04-13 00:57:27 +02:00
api.v1.routes.$id.ts DRY up ZodError → FieldError mapping 2026-04-19 11:45:09 +02:00
api.v1.routes._index.ts DRY up ZodError → FieldError mapping 2026-04-19 11:45:09 +02:00
api.v1.routes.compute.ts Session-bind /api/route and /api/overpass 2026-04-21 22:18:45 +02:00
api.v1.routes.test.ts fix: enforce Terms gate on bearer-token API requests 2026-05-08 01:59:28 +02:00
api.v1.test.ts Add unit tests for REST API validation and pagination 2026-04-13 00:58:18 +02:00
api.v1.uploads.ts DRY up ZodError → FieldError mapping 2026-04-19 11:45:09 +02:00
api.well-known.trails-cool.test.ts Implement OAuth2 PKCE auth, discovery, and mobile API client 2026-04-13 00:41:40 +02:00
api.well-known.trails-cool.ts Implement OAuth2 PKCE auth, discovery, and mobile API client 2026-04-13 00:41:40 +02:00
auth.accept-terms.tsx Prompt users with stale terms_version to re-accept 2026-04-19 08:06:16 +02:00
auth.login.tsx Add legal pages, ToS acceptance, and alpha banner 2026-04-18 00:08:48 +02:00
auth.logout.tsx Implement Journal auth: passkeys + magic links, no passwords 2026-03-23 17:38:46 +01:00
auth.register.tsx Implement notifications + supporting fixes 2026-04-26 01:28:55 +02:00
auth.verify.tsx Spec drift catch-up: URLs, settings split, navbar shape 2026-04-26 21:19:02 +02:00
explore.tsx Include the demo persona on /explore so users can follow it 2026-04-26 11:43:24 +02:00
feed.tsx Add Followed/Public toggle to /feed for signed-in users 2026-04-26 09:03:38 +02:00
follows.requests.tsx Merge /follows/requests into /notifications as a tabbed inbox 2026-04-26 08:24:59 +02:00
home.tsx Implement /explore: local user discovery directory 2026-04-26 09:24:19 +02:00
legal.imprint.tsx Apply minimal legal-review follow-ups 2026-04-19 07:27:56 +02:00
legal.privacy.tsx Add Send to Wahoo UI, i18n, and privacy disclosure 2026-04-30 22:44:50 +02:00
legal.terms.tsx Store Terms version alongside acceptance timestamp 2026-04-19 07:46:34 +02:00
notifications.tsx Merge /follows/requests into /notifications as a tabbed inbox 2026-04-26 08:24:59 +02:00
oauth.authorize.tsx Implement OAuth2 PKCE auth, discovery, and mobile API client 2026-04-13 00:41:40 +02:00
oauth.token.ts Implement Journal REST API v1 endpoints 2026-04-13 00:57:27 +02:00
privacy.tsx Add legal pages, ToS acceptance, and alpha banner 2026-04-18 00:08:48 +02:00
routes.$id.edit.tsx Apply public-content-visibility: visibility flag + public profile 2026-04-19 09:11:39 +02:00
routes.$id.tsx Wahoo capability adapters + caller migration (groups 3-5) 2026-05-08 01:25:33 +02:00
routes._index.tsx Add ClientMap wrapper to avoid lazy() SSR resolution 2026-04-06 22:52:57 +02:00
routes.new.tsx Implement Journal route management (Group 8) 2026-03-23 22:25:10 +01:00
settings._index.tsx Split /settings into 4 sub-pages with a sidebar layout 2026-04-26 09:48:00 +02:00
settings.account.tsx Split /settings into 4 sub-pages with a sidebar layout 2026-04-26 09:48:00 +02:00
settings.connections.tsx Wahoo capability adapters + caller migration (groups 3-5) 2026-05-08 01:25:33 +02:00
settings.profile.tsx Split /settings into 4 sub-pages with a sidebar layout 2026-04-26 09:48:00 +02:00
settings.security.tsx Split /settings into 4 sub-pages with a sidebar layout 2026-04-26 09:48:00 +02:00
settings.tsx Split /settings into 4 sub-pages with a sidebar layout 2026-04-26 09:48:00 +02:00
sync.import.$provider.tsx Wahoo capability adapters + caller migration (groups 3-5) 2026-05-08 01:25:33 +02:00
users.$username.followers.tsx Implement notifications + supporting fixes 2026-04-26 01:28:55 +02:00
users.$username.following.tsx Implement notifications + supporting fixes 2026-04-26 01:28:55 +02:00
users.$username.tsx Implement notifications + supporting fixes 2026-04-26 01:28:55 +02:00