 nate
|
d6aa4d878f
|
update: free plan monitors
|
2026-03-19 17:57:10 +04:00 |
|
nate
|
dad663b5e3
|
fix: receipt location
|
2026-03-19 13:59:02 +04:00 |
|
nate
|
113c1101c4
|
feat: add receipts to the payment service
|
2026-03-19 13:40:17 +04:00 |
|
nate
|
c1392a7dd9
|
test: improve css
|
2026-03-19 12:08:06 +04:00 |
|
nate
|
d8d1952304
|
fix: elysia issues 2
|
2026-03-19 10:06:14 +04:00 |
|
nate
|
61560ae521
|
feat: no-JS support for all core UI — registration, settings, monitor CRUD, logout
|
2026-03-19 09:55:08 +04:00 |
|
nate
|
955b26f942
|
update: ....
|
2026-03-19 01:02:52 +04:00 |
|
nate
|
c3103f06ce
|
feat: invoices section on settings page, show paid and active payments
|
2026-03-19 00:16:33 +04:00 |
|
nate
|
c9130243e8
|
feat: crypto payment system with HD wallets, Freedom.st integration, and checkout UI
|
2026-03-18 23:04:17 +04:00 |
|
nate
|
c89b63bd97
|
feat: implement free/pro plan system with monitor and interval limits
|
2026-03-18 22:40:45 +04:00 |
M1
|
baea9f8e7e
|
fix: sub-key notice as separate card below account section
|
2026-03-18 12:05:24 +04:00 |
|
M1
|
6d057d5797
|
fix: move sub-key notice inside account section
|
2026-03-18 12:04:40 +04:00 |
|
M1
|
988c43090b
|
fix: make sub-key notice match page style
|
2026-03-18 12:03:02 +04:00 |
|
M1
|
a9a1e43146
|
feat: add sub-key notice banner on settings page
|
2026-03-18 12:01:35 +04:00 |
|
M1
|
f7d6eff972
|
fix: block sub-keys from accessing/modifying email, account key, and other sub-keys
|
2026-03-18 11:51:52 +04:00 |
|
M1
|
eeb0318c4d
|
fix: hide login key and sub-keys from sub-key sessions
|
2026-03-18 11:48:51 +04:00 |
|
M1
|
e461d73ce3
|
refactor: drop all hashing, store keys plaintext
|
2026-03-17 06:47:22 +04:00 |
|
M1
|
54c89a5a11
|
fix: store key_plain on sub-keys, display always in settings with copy button
|
2026-03-17 06:40:33 +04:00 |
|
M1
|
c684d96d90
|
fix: rename API Keys -> Sub-Keys, show key inline on creation, no reload
|
2026-03-17 06:37:29 +04:00 |
|
M1
|
ab4f60e159
|
fix: rotate button inline with key field, updates in place
|
2026-03-17 06:34:57 +04:00 |
|
M1
|
0c65b5e3fa
|
fix: just show the login key on settings page
|
2026-03-17 06:33:13 +04:00 |
|
M1
|
2ec1915ef5
|
fix: remove pointless internal UUID from settings, show login key label instead
|
2026-03-17 06:31:41 +04:00 |
|
M1
|
9d8982ae50
|
fix: key rotation shows new key in dedicated reveal, not sub-key div; clarify account ID label
|
2026-03-17 06:29:58 +04:00 |
|
M1
|
6bdd76b4f0
|
security: auth redesign, SSRF protection, CORS lockdown, and 13 other fixes
- Auth (#2/#3): UUID PK, 256-bit keys, SHA-256 lookup + bcrypt hash
- SSRF (#1): validate URLs, block private IPs, cloud metadata endpoints
- CORS (#4): lock to pingql.com origins, not wildcard
- SSE limit (#6): 10 connections per monitor max
- ReDoS (#7): cap $regex patterns at 200 chars
- Monitor limit (#8): 100 per account default
- Cookie env config (#9): secure/domain from env vars
- Bearer parsing (#10): case-insensitive RFC 6750
- Pings retention (#11): 90-day pruner, hourly interval
- monitors.enabled index (#12): partial index for /internal/due
- Runner locking (#14): locked_until for horizontal scale safety
- COALESCE nullable bug (#17): dynamic PATCH with explicit undefined checks
- MONITOR_TOKEN null guard (#18): startup validation + middleware hardening
- reset-key cookie fix (#16): sets new cookie in response
|
2026-03-17 06:10:10 +04:00 |
|
M1
|
2f7273604b
|
refactor: full SSR dashboard, minimal SSE DOM patches, poll-based refresh
|
2026-03-16 21:14:45 +04:00 |
|
M1
|
ef56b47b09
|
feat: cookie-based auth, SSR dashboard, JS-optional login
|
2026-03-16 17:25:59 +04:00 |
|
M1
|
8e4cb84599
|
ux: widen dashboard layout to max-w-7xl, consistent px-8 padding
|
2026-03-16 17:15:45 +04:00 |
|
M1
|
2bfe3a0272
|
fix: remove double popup on key rotation
|
2026-03-16 16:07:12 +04:00 |
|
M1
|
e36c239000
|
refactor: ETA templating engine for dashboard, shared nav/head/foot partials
|
2026-03-16 15:14:26 +04:00 |