• Joined on 2026-05-03
null pushed to dev at null/BillTracker 2026-06-03 20:46:36 -05:00
e41f413f61 fix: pass ramseyMode explicitly to getDebtBills to avoid stale DB reads
null pushed to dev at null/BillTracker 2026-06-03 20:37:14 -05:00
4b86898bc7 wrap rotateSessionId transaction in try/catch, return null on failure
null closed issue null/BillTracker#51 2026-06-03 20:35:16 -05:00
rotateSessionId uses raw BEGIN/COMMIT/ROLLBACK instead of db.transaction()
null pushed to dev at null/BillTracker 2026-06-03 20:32:05 -05:00
2550034996 feat: v0.36.0 patch set — 404 page, OIDC encryption, session rotate, user validation, calendar fixes
null pushed to dev at null/BillTracker 2026-06-03 20:28:40 -05:00
36a65156e3 feat: merge pipeline workflow into bill-tracker (batch v0.36.0)
null closed issue null/BillTracker#1 2026-06-03 20:28:28 -05:00
Overdue Command Center
null closed issue null/BillTracker#10 2026-06-03 20:28:20 -05:00
Filtered Exports
null closed issue null/BillTracker#13 2026-06-03 20:28:08 -05:00
Payment method tracking and summary
null closed issue null/BillTracker#66 2026-06-03 20:27:33 -05:00
Month navigation arrows should bracket the month name (< MAY >)
null commented on issue null/BillTracker#79 2026-06-03 20:00:05 -05:00
MEDIUM: Admin routes use req.params.id without integer validation

Added at the top of admin.js:

function parseUserId(params) { const n = parseInt(params.id, 10); return Number.isInteger(n) && n > 0 ? n : null; } Applied to all 5 user routes:

Route…

null closed issue null/BillTracker#79 2026-06-03 20:00:05 -05:00
MEDIUM: Admin routes use req.params.id without integer validation
null commented on issue null/BillTracker#84 2026-06-03 19:57:48 -05:00
LOW: OIDC client secret stored in plaintext in user_settings table

Added getOidcClientSecret() helper — reads from DB, decrypts with fallback to plaintext for any legacy value saved before this fix Replaced 3 read sites (getOidcConfig, getOidcConfigStatus,…

null closed issue null/BillTracker#84 2026-06-03 19:57:48 -05:00
LOW: OIDC client secret stored in plaintext in user_settings table
null commented on issue null/BillTracker#48 2026-06-03 19:57:25 -05:00
Phase 6: Background Sync & Polish

Added getOidcClientSecret() helper — reads from DB, decrypts with fallback to plaintext for any legacy value saved before this fix Replaced 3 read sites (getOidcConfig, getOidcConfigStatus,…

null closed issue null/BillTracker#48 2026-06-03 19:57:25 -05:00
Phase 6: Background Sync & Polish
null commented on issue null/BillTracker#62 2026-06-03 19:50:09 -05:00
Analytics — Expense vs Spend color key partially covered by bar graph on desktop

Not reproducible in current code

null closed issue null/BillTracker#62 2026-06-03 19:50:09 -05:00
Analytics — Expense vs Spend color key partially covered by bar graph on desktop
null closed issue null/BillTracker#64 2026-06-03 19:49:17 -05:00
Calendar shows Due dot on days with no bills due (e.g. Saturday 16th)
null pushed to dev at null/BillTracker 2026-05-31 19:37:11 -05:00
e4f1f58730 feat: Roadmap pulls from Forgejo issues (v0.35.1)