Scott Idem dc7732ab5f feat(security): implement safe guest auth flow and harden request_jwt ...

- Patched request_jwt to strip privileged IDs when signing with public keys
- Updated AccountContext and V3 dependencies to preserve JWT payloads for guests
- Whitelisted Archive, Post, Event, and other core objects for public read access
- Added 'default_qry_str' to Event searchable fields
- Added test_e2e_jwt_guest_auth.py for security verification

2026-01-20 14:56:56 -05:00

..

__init__.py

Work membership and general clean up

2021-03-17 19:30:13 +00:00

account_cfg_models.py

New Sponsorships module. Related updates.

2024-02-08 20:25:13 -05:00

account_models.py

feat(v3): robust search wildcards, smart status filtering, and fixed ID population

2026-01-06 15:54:31 -05:00

activity_log_models.py

Updated to include standard fields.

2024-10-23 01:37:13 -04:00

address_models.py

ID Vision Phase 2: Standardize Page, Post, Person, Organization, and Hosted File objects

2026-01-19 18:04:17 -05:00

api_crud_models.py

Fix: Enhance V3 Search with 'contains', 'startswith', 'endswith' operators and improve error reporting.

2026-01-02 20:42:19 -05:00

api_models.py

Minor update for ISHLT Impexium import

2023-02-27 17:04:45 -05:00

archive_content_models.py

V3: Standardize Primary AE Objects and Synchronize Search Whitelists.

2026-01-08 12:24:34 -05:00

archive_models.py

Update for IDAA with archive content sorting and archive configs and event configs

2024-01-25 19:12:14 -05:00

auth_models.py

feat(security): implement safe guest auth flow and harden request_jwt

2026-01-20 14:56:56 -05:00

common_field_schema.py

New Sponsorships module. Related updates.

2024-02-08 20:25:13 -05:00

cont_edu_cert_models.py

More again again again again. Moving ID random generation to the SQL db instead. General clean up.

2022-06-30 17:34:47 -04:00

cont_edu_cert_person_models.py

More again again again again. Moving ID random generation to the SQL db instead. General clean up.

2022-06-30 17:34:47 -04:00

contact_models.py

feat(v3): robust search wildcards, smart status filtering, and fixed ID population

2026-01-06 15:54:31 -05:00

core_object_models.py

Added more documentation. Improved CRUD V3 endpoints and better responses.

2026-01-06 13:52:05 -05:00

data_store_models.py

Minor changes related to data_store

2024-03-05 16:59:54 -05:00

e_stripe_models.py

Work on Stripe log

2022-07-26 11:28:26 -04:00

error_models.py

Error Bubbling: Implement machine-readable rich error objects for CRUD operations

2026-01-19 17:01:58 -05:00

event_abstract_models.py

Sort of bug fix for abstracts and updating the abstract code

2023-09-22 10:30:07 -04:00

event_badge_models.py

feat(v3): robust search wildcards, smart status filtering, and fixed ID population

2026-01-06 15:54:31 -05:00

event_badge_template_models.py

V3: Standardize Primary AE Objects and Synchronize Search Whitelists.

2026-01-08 12:24:34 -05:00

event_cfg_models.py

Enable mod_badges_json and mod_exhibits_json config field for events

2023-09-28 16:38:49 -04:00

event_device_models.py

Enabled event_device for CRUD v1... Adding new fields.

2024-10-17 19:23:21 -04:00

event_exhibit_models.py

Exhibits now have enable and hide.

2024-03-12 17:58:33 -04:00

event_exhibit_tracking_models.py

Now with the ability to handle multiple custom question in the data export

2024-04-07 11:57:44 -04:00

event_file_models.py

V3: Standardize Primary AE Objects and Synchronize Search Whitelists.

2026-01-08 12:24:34 -05:00

event_location_models.py

Updated external_id field naming to be more consistent.

2024-09-03 12:30:31 -04:00

event_models.py

Less debug. A few new event fields for IDAA meetings.

2025-07-14 15:29:06 -04:00

event_person_detail_models.py

More again again again. Moving ID random generation to the SQL db instead. General clean up.

2022-06-30 17:00:17 -04:00

event_person_models.py

V3: Standardize Primary AE Objects and Synchronize Search Whitelists.

2026-01-08 12:24:34 -05:00

event_person_profile_models.py

Updates to person related models

2023-10-31 13:30:00 -04:00

event_person_tracking_models.py

Changes related to Docker, bug fixes, and event badges.

2023-01-12 18:21:00 -05:00

event_presentation_models.py

Updated external_id field naming to be more consistent.

2024-09-03 12:30:31 -04:00

event_presenter_models.py

Updating the models and less log info

2024-08-09 17:47:33 -04:00

event_registration_cfg_models.py

Working on stuff

2021-08-13 17:09:32 -04:00

event_registration_models.py

More again again again again. Moving ID random generation to the SQL db instead. General clean up.

2022-06-30 17:34:47 -04:00

event_session_models.py

Adding in a new poc_agree field or sessions. Seems reasonable.

2024-09-12 20:21:34 -04:00

event_track_models.py

More again again again. Moving ID random generation to the SQL db instead. General clean up.

2022-06-30 17:00:17 -04:00

flask_cfg_models.py

Minor update for ISHLT Impexium import

2023-02-27 17:04:45 -05:00

fundraising_cfg_models.py

Added better fundraising routes, methods, and models! I thought I already did this...

2022-11-18 15:52:41 -05:00

fundraising_models.py

Added better fundraising routes, methods, and models! I thought I already did this...

2022-11-18 15:52:41 -05:00

grant_models.py

Work on abstract submissions and related grants

2023-06-23 17:48:31 -04:00

hosted_file_link_models.py

Work on hosted files. Now with basic hosted directory check and clean up.

2022-08-09 17:43:30 -04:00

hosted_file_models.py

ID Vision Phase 2: Standardize Page, Post, Person, Organization, and Hosted File objects

2026-01-19 18:04:17 -05:00

journal_entry_models.py

Vision ID: Standardize Site Domain and Journal objects with string-only IDs and searchable mapping

2026-01-19 15:57:00 -05:00

journal_models.py

Vision ID: Standardize Site Domain and Journal objects with string-only IDs and searchable mapping

2026-01-19 15:57:00 -05:00

log_client_viewing_models.py

More again again again again. Moving ID random generation to the SQL db instead. General clean up.

2022-06-30 17:34:47 -04:00

membership_cfg_models.py

Work on Svelte integration

2021-07-13 18:19:36 -04:00

membership_group_models.py

feat(v3): robust search wildcards, smart status filtering, and fixed ID population

2026-01-06 15:54:31 -05:00

membership_person_group_models.py

feat(v3): robust search wildcards, smart status filtering, and fixed ID population

2026-01-06 15:54:31 -05:00

membership_person_models.py

More again again. Moving ID random generation to the SQL db instead. General clean up.

2022-06-30 16:14:28 -04:00

membership_person_profile_models.py

Code clean up. Membership tables, views, routes, methods, and models renamed.

2022-01-11 14:12:51 -05:00

membership_person_type_models.py

More again again. Moving ID random generation to the SQL db instead. General clean up.

2022-06-30 16:14:28 -04:00

membership_type_models.py

feat(v3): robust search wildcards, smart status filtering, and fixed ID population

2026-01-06 15:54:31 -05:00

obj_models.py

General clean up. Work on event device. Work on creating a common core object model.

2022-05-24 11:26:34 -04:00

order_cart_line_models.py

More again again again again. Moving ID random generation to the SQL db instead. General clean up.

2022-06-30 17:34:47 -04:00

order_cart_models.py

More again again again again. Moving ID random generation to the SQL db instead. General clean up.

2022-06-30 17:34:47 -04:00

order_cfg_models.py

feat(v3): robust search wildcards, smart status filtering, and fixed ID population

2026-01-06 15:54:31 -05:00

order_line_models_v3.py

Finally getting rid of the old display_name fields. Trying to use full_name and full_name_override everywhere.

2025-06-16 19:22:02 -04:00

order_line_models.py

Finally getting rid of the old display_name fields. Trying to use full_name and full_name_override everywhere.

2025-06-16 19:22:02 -04:00

order_models_v3.py

Work on orders and order lines. Removing user_id related from order. Also general clean up.

2022-03-16 16:52:03 -04:00

order_models.py

Work on orders and order lines. Removing user_id related from order. Also general clean up.

2022-03-16 16:52:03 -04:00

organization_models.py

ID Vision Phase 2: Standardize Page, Post, Person, Organization, and Hosted File objects

2026-01-19 18:04:17 -05:00

page_models.py

ID Vision Phase 2: Standardize Page, Post, Person, Organization, and Hosted File objects

2026-01-19 18:04:17 -05:00

person_models.py

ID Vision Phase 2: Standardize Page, Post, Person, Organization, and Hosted File objects

2026-01-19 18:04:17 -05:00

post_comment_models.py

ID Vision Phase 2: Standardize Page, Post, Person, Organization, and Hosted File objects

2026-01-19 18:04:17 -05:00

post_models.py

ID Vision Phase 2: Standardize Page, Post, Person, Organization, and Hosted File objects

2026-01-19 18:04:17 -05:00

product_models.py

Added more documentation. Improved CRUD V3 endpoints and better responses.

2026-01-06 13:52:05 -05:00

response_models.py

feat(api-v3): implement permissive updates, automatic ID resolution, and structured error reporting

2026-01-14 19:11:56 -05:00

response_models.py.snapshot

Reverted to known working version and preserved new file changes in snapshots.

2025-12-03 20:43:47 -05:00

site_domain_models.py

Vision ID: Standardize Site Domain and Journal objects with string-only IDs and searchable mapping

2026-01-19 15:57:00 -05:00

site_models.py

feat(v3): robust search wildcards, smart status filtering, and fixed ID population

2026-01-06 15:54:31 -05:00

sponsorship_cfg_models.py

Bug fix for sponsorships. Typos

2024-02-28 14:55:01 -05:00

sponsorship_models.py

Re-adding a field. website_url

2024-03-01 15:38:28 -05:00

sql_request_models.py

Work on event management related and created generic SQL select endpoint

2022-05-23 18:55:21 -04:00

user_models.py

V3: Standardize Primary AE Objects and Synchronize Search Whitelists.

2026-01-08 12:24:34 -05:00

user_role_models.py

Added better fundraising routes, methods, and models! I thought I already did this...

2022-11-18 15:52:41 -05:00

util_email_models.py

Now with the an email send endpoint!

2023-06-27 16:03:08 -04:00