naeel fb17c83e60 v0.5.154: fix приоритет IAM_API_URL, docs/IAM-ENV.md

2026-06-17 14:30:59 +04:00

..

api

fix: reject client_id when allowedIds list is empty (no IAM, no JWT claims)

2026-06-11 20:18:55 +04:00

middleware

v0.5.138: CSP script-src-attr unsafe-inline для onchange

2026-06-16 05:05:37 +04:00

routes

v0.5.116: фикс impersonatedCompanyId в сессии + тестовая имперсонация по трём ENV

2026-06-15 15:05:21 +04:00

auth.js

fix: X-Imp-* headers bridge UI→API impersonation + timezone GMT+4

2026-06-11 20:17:07 +04:00

config.js

v0.5.154: fix приоритет IAM_API_URL, docs/IAM-ENV.md

2026-06-17 14:30:59 +04:00

db.js

fix: add ALTER TABLE migration for impersonated_by column

2026-06-11 16:20:52 +04:00

queries.js

feat: double audit — impersonated_by in audit_log

2026-06-11 16:10:41 +04:00

validators.js

fix: 0.0.0.0/8 → blocked ranges + bump 0.5.23

2026-06-04 16:13:04 +03:00