Commit Graph

174 Commits

Author SHA1 Message Date
a897e8ead1 feat(lib): add OpenRouter client implementation 2026-04-07 08:08:58 -04:00
5922a835cb style: fix unused variable warnings
Prefix unused error variables with underscore to indicate
intentionally unused catch parameters.
2026-04-06 23:27:32 -04:00
403f41f078 fix(auth): sanitize error messages in error page
Add basic XSS sanitization by removing angle brackets from error
URL parameters before rendering.
2026-04-06 23:26:09 -04:00
4e7c56eec9 fix(ui): add error handling and loading state to sign-in
Add try/catch with toast notification and loading state for sign-in
button to improve UX and error visibility.
2026-04-06 23:25:40 -04:00
8d9329050d fix(ui): add error handling to sign-out
Add try/catch with toast notification for sign-out failures.
2026-04-06 23:24:40 -04:00
e1fd7dc5a3 feat(api): add input validation to AI endpoints
Add prompt validation to ai-event (non-empty string, max 2000 chars)
and events array length validation to ai-summary (max 100 items)
to prevent abuse and injection attacks.
2026-04-06 23:24:15 -04:00
3b5934dbfd fix(auth): correct session check in sign-out page
Change !session to !session?.user to properly detect unauthenticated
state. useSession() returns an object, not null.
2026-04-06 23:23:08 -04:00
cfa93da149 refactor(auth): remove unused SessionProvider wrapper
Remove the passthrough AuthSessionProvider component and its usage
in layout. better-auth hooks work without a provider wrapper.
2026-04-06 23:22:33 -04:00
bcd488e2d3 fix(auth): use correct sign-in method for genericOAuth
Add genericOAuthClient plugin to auth client and change sign-in
call from signIn.social() to signIn.oauth2() with correct
providerId parameter.
2026-04-06 23:20:39 -04:00
c3026c8262 feat(api): add auth check to ai-summary endpoint
Require authentication for ai-summary endpoint to prevent
unauthorized API key usage and cost leakage.
2026-04-06 23:18:46 -04:00
4c6f880a3f feat(auth): configure trustedOrigins for CSRF protection
Add trustedOrigins to better-auth config to ensure proper origin
validation behind reverse proxy.
2026-04-06 23:18:20 -04:00
ece03a9124 feat(auth): validate required env vars at startup
Add explicit validation for BETTER_AUTH_SECRET, BETTER_AUTH_URL, and
Authentik config variables. Set secret explicitly in better-auth config
to prevent silent session loss on restart.
2026-04-06 23:17:51 -04:00
15be2399c6 refactor: migrate session usage to better-auth API 2026-04-06 22:41:57 -04:00
d7d52ef1a8 refactor: migrate auth pages to better-auth client 2026-04-06 22:41:37 -04:00
490c601dc1 refactor: remove next-auth SessionProvider wrapper 2026-04-06 22:41:25 -04:00
08a894577b refactor: replace next-auth with better-auth core and client 2026-04-06 22:41:11 -04:00
febc57b240 refactor: update DB schema for better-auth conventions 2026-04-06 22:41:00 -04:00
28c982ee37 fix: docker build 2025-12-12 09:27:02 -05:00
f20f3d66a1 Simplify dropdown menu labels in event card
Remove redundant "event" text from Edit and Delete menu items for cleaner UI
2025-08-22 13:38:57 -04:00
824768ce93 Add RRuleDisplay component and clean up unused imports
- Create new RRuleDisplay component for better recurrence rule formatting
- Replace Badge with RRuleDisplay in EventCard for improved UX
- Remove unused imports across multiple files (CalendarEvent, Badge, Card components)
- Remove unused catch parameter in ai-event route
2025-08-22 13:35:13 -04:00
eb73f9f929 Refactor event management into reusable components
- Extract EventCard, EventsList, and event dialog into separate components
- Add new AI toolbar and drag-drop container components
- Simplify main page.tsx by removing inline component definitions
- Improve code organization and maintainability
2025-08-22 12:33:07 -04:00
6ab2946e8a refactor events list as shadcn cards 2025-08-20 14:12:32 -04:00
cde44ee2d7 fix grammar 2025-08-20 14:11:53 -04:00
655517a27c animate button clicks for UX 2025-08-20 14:07:22 -04:00
9a836fc866 refactor ai event creation into a promise toast 2025-08-20 13:14:29 -04:00
275e83a6c0 replace alerts with toasts 2025-08-20 13:13:52 -04:00
d8d0039c44 install 'sonner' toask 2025-08-20 13:12:08 -04:00
6e6e9b0699 update logo font 2025-08-20 12:36:33 -04:00
044e4fbb07 remove shadow from the header 2025-08-20 12:36:22 -04:00
2d0da9dbeb autoresize textfield with content & minor ui tweaks 2025-08-20 12:22:38 -04:00
d8e55e85a1 'fix' hydration error by rendering on the client 2025-08-20 11:27:11 -04:00
e0ff037c06 clear ai event prompt after generation 2025-08-20 11:14:24 -04:00
46a99775a0 add icon for 'system' theme 2025-08-20 11:04:25 -04:00
d50d77538b change shadcn theme 2025-08-20 11:04:05 -04:00
308f5c8380 fix d&d cta position 2025-08-19 05:52:28 -04:00
112ab01445 moved sign-in component to a proper folder 2025-08-19 05:41:46 -04:00
6818046d58 adjust recurrence picker to not be a card 2025-08-19 05:41:28 -04:00
ef035e2b7d add labels to action button sections 2025-08-19 05:33:36 -04:00
1a30b729e6 fix sign buttons inconsistencies in the header 2025-08-19 05:32:29 -04:00
caa89a87de update metadata & use logo as a link to root 2025-08-19 05:00:58 -04:00
fa39d7584b fix csr nextjs build error
https://nextjs.org/docs/messages/missing-suspense-with-csr-bailout
2025-08-19 04:35:07 -04:00
f92c79ac60 implement auth error page and moved auth-related pages to /auth path 2025-08-19 04:27:13 -04:00
12e9ec5d85 proper user/session creation and auth integration into UI 2025-08-19 03:40:06 -04:00
92535f7e54 claude drizzle integration 2025-08-19 01:54:19 -04:00
9942a11c0d drizzle setup 2025-08-19 01:54:19 -04:00
1fdc20ee0c fix random auth errors
idk how i did it
2025-08-16 22:15:22 -04:00
1fe3ef0ee1 fix untrustedHost authjs issue
https://authjs.dev/reference/core/errors#untrustedhost
2025-08-16 19:39:46 -04:00
b17ed18d46 remove explicit coloring from shadcn summary card 2025-08-16 19:32:39 -04:00
63d32931b2 move summarize button to action bar 2025-08-16 19:32:15 -04:00
0e919ea69b create auth session provider 2025-08-16 19:26:19 -04:00