Frederic CabassutandClaude Opus 4.6 c9e041bffe refactor(api): scope all queries by authenticated user ...

Add getUserId/requireAdmin helpers in api-utils.ts. All notes, tags,
search, sync, and attachment routes now filter by userId to ensure
complete data isolation between users. Sync server accepts userId
parameter for push/pull operations.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-09 01:10:37 +01:00

..

lib

refactor(api): scope all queries by authenticated user

2026-03-09 01:10:37 +01:00

routes

refactor(api): scope all queries by authenticated user

2026-03-09 01:10:37 +01:00

app.css

refactor: isolate auth layout, unify tags, add editor animation and pin indicator

2026-03-06 23:12:36 +01:00

app.d.ts

feat(types): add User type and App.Locals

2026-03-09 01:10:37 +01:00

app.html

feat: add proper favicon set from RealFaviconGenerator

2026-03-07 07:05:59 +01:00

hooks.server.ts

refactor(hooks): populate event.locals.user from session

2026-03-09 01:10:37 +01:00