hotel-manage-stack/kitchen
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
kitchen/backend/api
History
Exact
jtricerolph bcc94024e3 Pre-deploy security/correctness fixes (port log E17) 
- Remove dead kitchen->KDS internal API (api/internal.py, verify_internal_secret)
  — KDS reads kitchen_db directly (E16), nothing ever called this endpoint
- Add expires_at to dispute_attachments; public attachment links now expire
  after 30 days instead of staying valid forever (A4)
- Add services/upload_validation.py: sniff real file content via python-magic
  instead of trusting the client-supplied Content-Type header, plus a 20MB
  cap. Applied across invoices/logbook/food_flags/credit_notes/disputes
  upload endpoints (A5) — disputes previously had no file-type check at all
- Fix nginx client_max_body_size drift (800m -> the plan's intended 20m)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-06 14:44:58 +00:00
..
__init__.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
backup.py Audit pass: cookie auth migration, route guards, GP% clamp, CSV export, OCR transaction safety, N+1 fix, and cleanup 2026-07-13 10:04:20 +00:00
budget.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
calendar_events.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
cost_distributions.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
cover_overrides.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
credit_notes.py Pre-deploy security/correctness fixes (port log E17) 2026-08-06 14:44:58 +00:00
disputes.py Pre-deploy security/correctness fixes (port log E17) 2026-08-06 14:44:58 +00:00
event_orders.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
external.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
field_mappings.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
food_flags.py Pre-deploy security/correctness fixes (port log E17) 2026-08-06 14:44:58 +00:00
imap.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
ingredients.py Audit pass: cookie auth migration, route guards, GP% clamp, CSV export, OCR transaction safety, N+1 fix, and cleanup 2026-07-13 10:04:20 +00:00
invoices.py Pre-deploy security/correctness fixes (port log E17) 2026-08-06 14:44:58 +00:00
kds_settings.py Fix 413 upload limit + add /api/kds/settings to kitchen backend 2026-07-12 17:47:28 +00:00
logbook.py Pre-deploy security/correctness fixes (port log E17) 2026-08-06 14:44:58 +00:00
menus.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
newbook.py Add 'use main stack settings' toggle for third-party integration credentials 2026-07-12 21:57:10 +00:00
public.py Pre-deploy security/correctness fixes (port log E17) 2026-08-06 14:44:58 +00:00
purchase_orders.py Audit pass: cookie auth migration, route guards, GP% clamp, CSV export, OCR transaction safety, N+1 fix, and cleanup 2026-07-13 10:04:20 +00:00
recipes.py Audit pass: cookie auth migration, route guards, GP% clamp, CSV export, OCR transaction safety, N+1 fix, and cleanup 2026-07-13 10:04:20 +00:00
reconciliation.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
reports.py Replace in-app Access Control with JWT cap enforcement 2026-07-12 23:17:22 +00:00
residents_table_chart.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
resos.py Add 'use main stack settings' toggle for third-party integration credentials 2026-07-12 21:57:10 +00:00
sambapos.py Add 'use main stack settings' toggle for third-party integration credentials 2026-07-12 21:57:10 +00:00
search.py Replace in-app Access Control with JWT cap enforcement 2026-07-12 23:17:22 +00:00
settings.py Wire Azure OCR to central settings toggle; remove redundant Users section 2026-07-12 22:58:32 +00:00
suppliers.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
support.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00