ppt-tool/backend
Vadym Samoilenko 864278a0fa Comprehensive audit: fix auth, basePath, security, and UI bugs
Backend security (P0):
- Add get_current_user auth to all files endpoints (upload, decompose, url, update)
- Add get_current_user auth to all images endpoints (generate, upload, uploaded, generated, delete)
- Add get_current_user auth to slide edit and edit-html endpoints
- Add get_current_user auth to outlines SSE stream endpoint (was fully unauthenticated)

Frontend API fixes:
- adminSlice fetchTeams: bare fetch() → apiFetch() (was missing basePath prefix)
- dashboard getPresentation: add missing getHeader() auth headers
- images getUploadedImages/deleteImage: add missing getHeader() auth headers
- templates/[id] toggle layout: bare fetch() → apiFetch() (404 in production)
- header.ts: remove incorrect client-side CORS headers (Access-Control-Allow-*)

UI fixes:
- admin/users: add fetchUsers() refetch after deactivate (table wasn't updating)
- presentationGeneration.ts: fix corrupt comment with embedded import statement

Security:
- has-required-key/route.ts: remove console.log() leaking OPENAI_API_KEY to logs

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-20 18:46:45 +00:00
..
alembic/versions Fix migration: move to correct path, update down_revision to c7a3f8e21d4b 2026-03-01 20:10:36 +00:00
api Comprehensive audit: fix auth, basePath, security, and UI bugs 2026-03-20 18:46:45 +00:00
assets Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
constants Phase 2: Admin panel, analytics, storage, template pipeline, multi-provider LLM 2026-02-26 23:39:34 +00:00
enums Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
migrations Fix migration: move to correct path, update down_revision to c7a3f8e21d4b 2026-03-01 20:10:36 +00:00
models Improve presentation pipeline: brief summarization + section attribution + narrative continuity 2026-03-19 20:22:22 +00:00
scripts Phase 2: Admin panel, analytics, storage, template pipeline, multi-provider LLM 2026-02-26 23:39:34 +00:00
services Fix PyMuPDF: replace get_text("markdown") with get_text("text") 2026-03-20 17:59:22 +00:00
static Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
tests Phase 7: Apply design system to all admin pages + fix test stubs 2026-03-01 19:01:52 +00:00
utils Improve presentation pipeline: brief summarization + section attribution + narrative continuity 2026-03-19 20:22:22 +00:00
workers Increase ARQ job timeout to 90 minutes 2026-02-27 21:48:51 +00:00
.python-version Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
alembic.ini Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
Dockerfile Speed up updates: hot-copy backend code, suppress GPU warnings 2026-03-20 17:49:48 +00:00
mcp_server.py Rebrand Presenton to Oliver DeckForge, pre-configure models, use NanoBanana Pro 2026-02-26 18:17:11 +00:00
openai_spec.json Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
pyproject.toml Replace docling+layoutparser+torch with PyMuPDF (~3.5GB → ~80MB) 2026-03-19 20:06:46 +00:00
server.py Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
uv.lock Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00