5 Commits

Author	SHA1	Message	Date
cottongin	9f60c6983d	feat: auth route uses named admin lookup, embeds name in JWT ... - Login/verify use findAdminByKey; JWT and response include admin name - Verify returns 403 when token lacks name (legacy tokens) - Test tokens include name for getAuthToken() - Set Content-Type on supertest JSON bodies (superagent/mime resolution) Made-with: Cursor	2026-03-23 09:38:35 -04:00
cottongin	b9206b6cfe	feat: add PUT and DELETE /api/sessions/:id/notes endpoints ... Made-with: Cursor	2026-03-23 00:13:09 -04:00
cottongin	ce3347d0b1	feat: gate full notes behind auth on single session endpoint ... Made-with: Cursor	2026-03-23 00:09:39 -04:00
cottongin	e9f1b89d44	feat: add has_notes and notes_preview to session list, omit full notes ... Made-with: Cursor	2026-03-23 00:06:09 -04:00
cottongin	656d9c3bf6	feat: add notes preview helper with tests ... Made-with: Cursor	2026-03-23 00:01:09 -04:00