Scott Idem 4629e1ec63 feat(site_domain): restore access_key enforcement for FQDN lookups ...

- api_crud_v3: strip falsy access_key values; restrict keyless queries
  to public domains (both site_access_key and site_domain_access_key
  must be NULL/empty); 75-line recursive block replaced with ~16 lines
- lib_sql_search: expand virtual 'access_key' field into priority SQL —
  site_access_key first, site_domain_access_key as fallback
- cms.py: add site_domain_access_key to site_domain searchable_fields
- docs: update frontend guide with access key behavior and examples
- e2e test: expand to cover all valid/invalid access key scenarios (15/15)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-31 14:46:33 -04:00

..

__init__.py

Refactor: Modularize object definitions and migrate event-related objects to V3 CRUD.

2026-01-02 17:53:35 -05:00

cms.py

feat(site_domain): restore access_key enforcement for FQDN lookups

2026-03-31 14:46:33 -04:00

core.py

feat(registry): standardize searchable_fields and add developer reminders

2026-02-03 15:51:05 -05:00

events_exhibits.py

feat(v3-api): whitelist lead detail fields for exhibit tracking search

2026-02-07 18:51:15 -05:00

events_general.py

feat: Implement Event File Hosted Data Fix and API Guide Update

2026-02-19 15:22:17 -05:00

events_presentation.py

feat: Implement Event File Hosted Data Fix and API Guide Update

2026-02-19 15:22:17 -05:00

events_registration.py

Commit remaining changes: logging upgrades and E2E test

2026-03-27 11:47:35 -04:00

events.py

Adding more searchable_fields for security. Broke up large files to make them easier to manage.

2026-01-06 11:14:37 -05:00

journals.py

fix(v3-nested): support aliases in nested CRUD routes

2026-02-06 14:13:22 -05:00

legacy_v1.py

refactor(core): modularize monolithic routers and methods

2026-02-03 17:53:14 -05:00

lookups.py

feat: implement V3 Uniform Lookup System with hierarchical overrides and site-based whitelisting

2026-02-20 14:48:50 -05:00

membership.py

feat(v3): populate searchable_fields for all remaining object definitions

2026-01-06 18:18:39 -05:00

orders.py

feat(v3): populate searchable_fields for all remaining object definitions

2026-01-06 18:18:39 -05:00

other.py

security(v3): implement IDAA-baseline maximum lockdown

2026-02-13 19:19:53 -05:00