Issues - server-26 - Gitea: Git with a cup of tea

logan/server-26

Labels Milestones New Issue

Expired session renders pages signed-out instead of redirecting to login area/auth area/frontend

opened 2026-10-25 23:12:29 -04:00 by logan

Discord settings: no way to unlink a server, and org owners have no Discord view (all routes platform-admin only) area/auth area/discord

opened 2026-10-04 20:07:43 -04:00 by logan

Node revoke follow-ups: /systems node auth ignores approval_status; no UI to reject an approved node area/auth area/mqtt

opened 2026-10-04 18:02:35 -04:00 by logan

trip_chat spend gate relies solely on per-caller rate limit, not a role check (found during #81) area/auth area/billing

opened 2026-09-01 02:45:34 -04:00 by logan

Credential rotation docket: 2 outstanding API keys + gcp-key.json (founding agenda item 2) area/auth area/infra-deploy

opened 2026-08-24 23:41:26 -04:00 by logan

2 / 5

Close the /admin/features Firestore SSH side-door: require_service_key_or_admin + distinct agent credential area/auth area/governance

opened 2026-08-24 23:41:26 -04:00 by logan

Platform admin cannot see or change which org a user belongs to — user management is org-blind area/auth area/frontend

opened 2026-08-23 23:57:23 -04:00 by logan

Firestore rules and indexes are in source control but never deployed area/auth area/infra-deploy

opened 2026-08-19 22:06:55 -04:00 by logan

Member and node write endpoints are platform-admin-only, blocking org owners area/auth

opened 2026-08-19 22:06:54 -04:00 by logan

/admin reads are not org-scoped, leaking data across tenants area/auth

opened 2026-08-19 22:06:53 -04:00 by logan

Google sign-in fails: auth handler is cross-site under Chrome storage partitioning area/auth area/frontend

opened 2026-08-19 22:06:53 -04:00 by logan