towerops/lib/towerops_web/controllers/api
Graham McIntire bc1ac21f1e
fix: use correct auth check for API organization updates
- API auth uses current_user, not current_scope
- Check membership role directly instead of using owner?/1 helper
- Allow superusers to update organization settings
- Fixes KeyError: key :current_scope not found

Previous code assumed LiveView context with current_scope, but API
requests only have current_user and current_organization_id assigned.
2026-03-10 13:41:38 -05:00
..
v1 fix: use correct auth check for API organization updates 2026-03-10 13:41:38 -05:00
account_data_controller.ex security: implement comprehensive security audit fixes 2026-03-05 13:08:10 -06:00
error_helpers.ex fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
mobile_auth_controller.ex security: fix critical vulnerabilities and atom exhaustion risks 2026-02-08 10:30:30 -06:00
mobile_controller.ex rename equipment to device 2026-01-17 14:48:46 -06:00