7 commits

Author	SHA1	Message	Date
Graham McIntire	3a408a8dc1	Security hardening + performance fixes across codebase ... CRITICAL: - Membership: remove :role/:org_id/:user_id from mass-assignment cast; use explicit create_changeset/4 and role_update_changeset/2 - GraphQL member resolver: add authorize_invite/3 checking admin/owner role and role hierarchy - REST invitations controller: add auth check for invite creation HIGH: - ApiToken: remove :organization_id/:user_id from cast; use explicit create_changeset/4 MEDIUM: - Move 8 LiveView Ecto queries into context modules (Admin, Alerts, Coverages, OnCall, Snmp) - Replace Process.put/Process.get with socket assigns for unresolved_alert_count (user_auth + layouts + 50 templates) - Add batch get_utilization_for_interfaces/1 to eliminate N+1 capacity queries in device show - Replace Process.sleep with Process.monitor/assert_receive or Process.send_after in 5 test files LOW: - Add handle_params/3 to UserResetPasswordLive, UserRegistrationLive, StatusPageLive - Remove redundant Repo.preload calls; add preloads to list_site_devices/1 - Fix @impl annotations and credo nesting warnings	2026-06-21 17:40:50 -05:00
Graham McIntire	3632580d1b	fix: address security and reliability findings from bugs.md review ... - Client IP: only trust X-Forwarded-For from RFC 1918 proxy IPs - Webhook auth: handle nil/blank secret with controlled error, not 500 crash - Sudo redirect: reuse validated return_path? from login to prevent open redirect - Map live: remove redundant inline script (ensureLeaflet hook handles loading) - Bang calls: convert crash-prone exact matches to case in QR live and API controllers	2026-05-11 18:54:12 -05:00
Graham McIntire	833de33622	fix: vendor Leaflet 1.9.4 locally instead of fetching from unpkg ... unpkg.com fetches were intermittently failing in production, leaving the /sites-map page without a working map. Vendoring Leaflet (JS, CSS, marker/layer images) under priv/static/vendor/leaflet/ removes the runtime CDN dependency, the matching CSP relaxation, and the SRI hash churn on future updates. Add 'vendor' to ToweropsWeb.static_paths/0 so Plug.Static serves the new tree, and revert script-src/style-src to no longer list unpkg.com. connect-src still allows *.tile.openstreetmap.org for tile fetches.	2026-05-01 17:06:54 -05:00
Graham McIntire	c7a236e504	reliability-audit-fixes (#181) ... Reviewed-on: graham/towerops-web#181	2026-03-26 14:10:36 -05:00
Graham McIntie	243b773e39	i18n: wrap all user-facing strings in gettext()	2026-02-14 17:44:01 -06:00
Graham McIntire	a028695d3b	format	2026-02-14 13:57:25 -06:00
Graham McIntie	5df5c97c45	feat: add geographic location to sites with geocoding, address fields, and Leaflet.js network map	2026-02-14 13:07:14 -06:00