adminandClaude Sonnet 4.6 a3ce59f2a8 fix(auth): return 503 when NEXT_PUBLIC_APP_URL unset for invite redirectTo ...

Prevent invite emails from falling back to localhost when NEXT_PUBLIC_APP_URL
is unset in production. Now explicitly checks and rejects with 503.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-17 19:03:58 +08:00

..

admin

fix(auth): return 503 when NEXT_PUBLIC_APP_URL unset for invite redirectTo

2026-07-17 19:03:58 +08:00

auth/callback

fix(auth): redirect to appUrl after invite callback

2026-07-16 21:44:12 +08:00

capa

fix: P1 API security hardening — rate limits, auth guards, duplicate prevention

2026-07-12 20:47:32 +08:00

cron

security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect

2026-07-12 20:36:28 +08:00

dashboard

feat: switch AI provider from Anthropic to DeepSeek

2026-07-12 21:51:15 +08:00

incidents

feat: delete + deactivate for sites, zones, and trucks; harden incident API error handling

2026-07-13 16:05:36 +08:00

notifications

feat: Phase 5 & 6 — usability, compliance hardening, analytics

2026-07-12 10:25:08 +08:00

reports/jkkp8

feat: Phase 5 & 6 — usability, compliance hardening, analytics

2026-07-12 10:25:08 +08:00

settings

fix: recover orphaned DeepSeek key + remove retired settings slots

2026-07-13 07:11:09 +08:00