22 Commits

Author SHA1 Message Date
Richard 565b14533c fix: Skip default admin@local.host creation during container startup if an admin user already exists 2026-08-01 12:42:29 +02:00
Richard d9280c3078 feat: Allow registered users to sign up guests via new + GAST button 2026-08-01 12:37:56 +02:00
Richard 7614163f78 feat: Implement group-restricted Live Sessions & IP Monitoring and 1-click Admin Email Confirmation 2026-08-01 12:26:44 +02:00
Richard c295471827 refactor: Remove ALTCHA completely for simple 1-click guest signups 2026-07-31 12:13:31 +02:00
Richard 8dacdc9042 fix: Use native django.http.JsonResponse and test attribute fallback for ALTCHA challenge widget 2026-07-31 12:05:14 +02:00
Richard c8aed130b8 fix: Register /api/altcha-challenge/ route and return real display_name for own guest session signups 2026-07-31 12:01:36 +02:00
Richard 71542f8b88 fix: Enforce JSONRenderer on AltchaChallengeView to return Content-Type application/json expected by ALTCHA widget 2026-07-31 11:49:15 +02:00
Richard ba172d321f fix: Correct STATIC_URL with leading slash and mount static_volume shared between backend and nginx 2026-07-31 11:46:44 +02:00
Richard 896dfda240 fix: Preserve HTTPS X-Forwarded-Proto in Nginx and configure SECURE_PROXY_SSL_HEADER in Django to fix 403 CSRF verification on Django Admin 2026-07-31 11:43:43 +02:00
Richard b7a5158254 feat: Add native Django ALTCHA challenge generation and server-side HMAC validation endpoint 2026-07-31 11:42:07 +02:00
Richard ca6652ad7c fix: Add whitenoise>=6.5.0 to backend requirements.txt so Docker container installs it during build 2026-07-31 11:28:11 +02:00
Richard 6129462534 fix: Guarantee admin user creation with fallback credentials admin / adminpassword during production docker startup 2026-07-31 11:26:26 +02:00
Richard 2403f1313f feat: Add user deletion capability for admins, add WhiteNoise for Django admin static assets, and configure CSRF_TRUSTED_ORIGINS for production reverse proxies 2026-07-31 11:22:25 +02:00
Richard 5f2061f013 fix: Integrate official aCAPTCHA v1.1 Web Component in GuestSignupModal and disable seed_data execution in production docker-compose 2026-07-31 11:20:55 +02:00
Richard 782d4d72a3 feat: Allow event owners to delete their own events and admins to delete any event with UI action buttons and confirmation dialog 2026-07-31 11:19:49 +02:00
Richard e2b311b634 feat: Add event co-managers permissions and allow managers/admins to signup guests on skill-restricted shifts 2026-07-31 11:06:47 +02:00
Richard 821e14fcab feat: Add specific shift date field for multi-day events with date selector in EventEditor and date badge in ShiftMatrix 2026-07-31 10:52:20 +02:00
Richard 3cb02583b7 feat: Add create_admin management command for easy initial admin user setup in Coolify/Docker 2026-07-31 10:33:31 +02:00
Richard c97abb7fb1 fix: Resolve Coolify build failure by fixing requirements.txt PyPI versions, adding gunicorn, and using standard pip in Dockerfile 2026-07-31 10:30:31 +02:00
Richard 7c377937ea feat: Add preset shift templates, admin SMTP settings, test email dispatch, and email verification opt-out option 2026-07-31 10:26:55 +02:00
Richard 6ffcc58a4c feat: Add email verification, owner shift deletion, Coolify Docker compose setup, and fixes 2026-07-31 10:16:22 +02:00
Richard a69f31649c Initial commit 2026-07-31 10:08:13 +02:00