cartsnitch/api
12
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
131 Commits 37 Branches 0 Tags
06c6dbed5c7f6df6d4cf4bd34243974284b936d4
Commit Graph

10 Commits

Author SHA1 Message Date
Barcode Betty 750c01888a fix: add Grype CVE ignores and cache-bust Debian apt-get upgrade layers 
Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-04-15 21:53:34 +00:00
Paperclip 0d999c0de3 fix: remediate high-severity CVEs in Docker images 
- Add apk upgrade to frontend Dockerfile (build + prod stages)
- Add apk upgrade to auth Dockerfile (build + runtime stages)
- Add apt-get upgrade to api Dockerfile (build + prod stages)
- Add apt-get upgrade to receiptwitness Dockerfile (build + prod stages)
- Run npm audit fix for frontend and auth dependencies

Refs: CAR-616
Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-04-14 23:51:42 +00:00
Pawla Abdul 5c8fe9a62b fix(api): make alembic migrations idempotent for fresh databases 
- 001: guard has_table check; skip if session_data already TEXT
- 002: guard each ADD COLUMN / CREATE TABLE; guard password migration
- 003: guard has_table; guard nullable check
- 004: guard has_table; skip if users.id already TEXT
- env.py: add Base.metadata.create_all after run_migrations to bootstrap fresh DBs
- api/user.py: make hashed_password nullable; add email_verified, image, email_inbound_token fields

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-04-04 16:28:29 +00:00
cartsnitch-engineer[bot] 3cf87eb771 fix(api): include alembic config and migrations in Docker image 2026-04-04 04:40:50 +00:00
CartSnitch Engineer Bot bbbf97d027 fix(api): revert auth/type regressions from standalone sync, keep email-in feature only 
- Revert auth/dependencies.py to cookie+Bearer dual auth with str user IDs
- Add GET /auth/me/email-in-address endpoint for receipt email routing
- Update User model: add email_inbound_token, change id/store_id/user_id to str
- Update AuthService and UserResponse to use str user IDs
- Update route count test: 33 -> 34 routes
- Restore e2e test for email-in-address endpoint

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-04-03 09:40:39 +00:00
cartsnitch-engineer[bot] 1874de4beb fix(api): run Alembic migrations on startup (#90) 
Merged by Coupon Carl (CEO). QA approved, CTO approved. CI green (lighthouse failure is known/tracked). cc @cpfarhood
 2026-03-31 21:55:00 +00:00
cartsnitch-engineer[bot] 93cfaf55f7 fix(api): add libpq5 to prod stage for psycopg2 runtime 
Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-03-31 02:48:25 +00:00
cartsnitch-ci[bot] c3e7a14c9c fix(api): correct COPY paths in Dockerfile for monorepo build context 
The api/Dockerfile used bare paths (COPY pyproject.toml ./, COPY src/
./src/) which resolved to the repo root with context: ., causing Docker
builds to fail since api/pyproject.toml and api/src/ don't exist at the
repo root.

Add 'api/' prefix to all COPY source paths, matching the pattern already
used in receiptwitness/Dockerfile.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-03-31 01:09:16 +00:00
Barcode Betty ed423c00fb fix(deploy): include alembic in API Docker image 
Adds alembic.ini and alembic/ directory to the production API image so
alembic upgrade head can run in-cluster as an init container.

Also carries migration 003 (make hashed_password nullable) from PR #66.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-03-30 20:13:56 +00:00
Coupon Carl b7e6f637a7 feat: merge cartsnitch/api into api/ subdirectory 
Consolidate API gateway service into monorepo.
Squashed from https://github.com/cartsnitch/api main (89bacb1).

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-03-28 02:24:02 +00:00