controlPanel/api
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
58 Commits 1 Branch 0 Tags
82f63d224e9288acd9b89a3cdd88c6b362082331
Commit Graph
6 Commits
Author SHA1 Message Date
Mahdi 48649a6a79 fix(settings-proxy): prefer SMS shared secret for product push auth 2026-08-14 17:44:53 +03:30
MahdiandCursor aec5e08a1e fix(settings-proxy): send SMS shared secret as Bearer for CDN 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-11 19:53:30 +03:30
MahdiandCursor 8fe7d59c1b fix(settings-proxy): push kill-switch with SMS shared HMAC 
When remoteApiToken is empty, sign SuperAdmin→product /super/settings
with the same SMS_REMOTE_SHARED_SECRET + domain headers used by SMS.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-11 19:33:13 +03:30
MahdiandCursor 51e350405a feat: per-tenant server access kill switch 
Add Tenant.serverAccessBlocked, toggle API with appVersion bump and settings push, and expose stealth server_reachable in get_user.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-11 16:05:04 +03:30
MahdiandCursor af1e217a68 feat(auth): add module read/write admin RBAC 
Introduce permission catalog, PermissionsGuard, JWT/me payload with
role+permissions, and gate all module controllers. Admins CRUD accepts
role/permissions with safety rules; migrate existing users to super_admin.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-10 15:29:04 +03:30
SuperAdmin 7fbc47766c Initial SuperAdmin API (NestJS + Prisma) 2026-07-23 10:25:32 +03:30