cms.c2sgmbh/src/lib
Martin Porwoll ab4ee4bb70 fix(access): allow tenant resolution from query parameter in tenantScopedPublicRead
Previously, tenantScopedPublicRead only resolved the tenant from the Host
header, which fails when frontend API clients call cms.c2sgmbh.de (the CMS
hostname doesn't match any tenant domain). Now falls back to extracting the
tenant ID from the where[tenant][equals] query parameter. The returned access
filter still enforces tenant isolation.

Also adds seed script for zweitmeinung (tenant 12) with all content:
site settings, 2 service categories, 6 services, 24 FAQs, navigation,
4 social links, and contact form.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-21 00:44:42 +00:00
..
access feat(monitoring): add 4 monitoring collections (Snapshots, Logs, AlertRules, AlertHistory) 2026-02-15 00:14:53 +00:00
alerting feat: implement monitoring & alerting system 2025-12-07 20:58:20 +00:00
audit chore: code cleanup, TypeScript fixes, and dependency updates 2025-12-15 09:02:58 +00:00
email security: harden payload endpoints and access controls 2026-02-17 10:41:51 +00:00
integrations fix: resolve global typecheck errors 2026-02-17 08:57:32 +00:00
jobs feat(community): Phase 2.5 - Token Refresh Service 2026-01-16 21:50:08 +00:00
monitoring fix(ci): increase build heap size and format monitoring files 2026-02-17 11:58:08 +00:00
pdf feat: security hardening, monitoring improvements, and API guards 2026-02-17 11:42:56 +00:00
queue fix(queue): resolve queue-worker crash-loop via Redis auth and PM2 config 2026-02-14 17:46:54 +00:00
retention feat(monitoring): add retention policies for monitoring collections 2026-02-15 00:33:43 +00:00
security fix: stabilize guard responses and validation typing 2026-02-17 11:47:55 +00:00
services fix: resolve global typecheck errors 2026-02-17 08:57:32 +00:00
utils feat: add downloadAndUploadImage utility for YouTube thumbnails 2026-02-14 12:29:04 +00:00
validation feat: security hardening, monitoring improvements, and API guards 2026-02-17 11:42:56 +00:00
video feat: add comprehensive video feature with collections, hooks, and tests 2025-12-16 10:48:33 +00:00
youtube feat(youtube): add conflict detection service 2026-02-14 13:50:24 +00:00
communityAccess.ts security: harden payload endpoints and access controls 2026-02-17 10:41:51 +00:00
envValidation.ts feat: security hardening, monitoring improvements, and API guards 2026-02-17 11:42:56 +00:00
i18n.ts chore: code cleanup, TypeScript fixes, and dependency updates 2025-12-15 09:02:58 +00:00
redis.ts fix(queue): resolve queue-worker crash-loop via Redis auth and PM2 config 2026-02-14 17:46:54 +00:00
search.ts security: harden payload endpoints and access controls 2026-02-17 10:41:51 +00:00
structuredData.ts feat: add i18n, SEO, and frontend infrastructure 2025-12-01 08:19:35 +00:00
tenantAccess.ts fix(access): allow tenant resolution from query parameter in tenantScopedPublicRead 2026-02-21 00:44:42 +00:00
youtubeAccess.ts fix: resolve global typecheck errors 2026-02-17 08:57:32 +00:00