summaryrefslogtreecommitdiff
path: root/apps/web/app/api
Commit message (Expand)AuthorAgeFilesLines
* feat: scoped mark-all-read, share enhancements, notification z-indexFuwn2026-02-102-2/+18
* refactor: use Supabase Auth display name instead of custom columnFuwn2026-02-102-2/+3
* fix: P2 security hardening and tier limit parityFuwn2026-02-102-51/+19
* fix: P0 correctness and security fixesFuwn2026-02-0911-10/+11
* security: harden API routesFuwn2026-02-086-15/+66
* fix: invoice.paid handler now retrieves subscription for correct tier resolutionFuwn2026-02-081-16/+13
* debug: add webhook signature verification loggingFuwn2026-02-081-1/+5
* feat: enable promotion codes on Stripe checkoutFuwn2026-02-081-0/+1
* feat: add Vercel BotID protection and fix billing origin fallbackFuwn2026-02-087-8/+49
* feat: share with highlighted excerpt and fix auth redirect URLsFuwn2026-02-081-1/+38
* fix: share clipboard write for Safari transient activationFuwn2026-02-081-11/+6
* fix: resolve 6 pre-ship audit bugsFuwn2026-02-072-24/+39
* security: remove unsafe-eval CSP, fix host header injection, harden API routesFuwn2026-02-074-15/+32
* fix: api key prefix rename, revoke fix, and webhook validationFuwn2026-02-072-12/+36
* style: lowercase all user-facing strings and add custom eslint ruleFuwn2026-02-0717-55/+55
* feat: asa.news RSS reader with developer tier, REST API, and webhooksFuwn2026-02-0717-0/+1488