morz-infoboard/server/backend/internal
Jesko Anschütz 79fcc20b79 fix(display): screen UUID lookup, authScreen middleware, JSON encoding
- playerstatus: look up screen by slug before UpsertDisplayState to pass UUID (not slug) and avoid FK violation
- router: switch display command route from authOnly to authScreen for proper permission enforcement
- display.go: remove redundant GetBySlug + requireScreenAccess (now handled by authScreen middleware), drop store dependency
- notifier: replace fmt.Sprintf %q with json.Marshal for correct JSON encoding of display command payload

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-26 23:35:05 +01:00
..
app feat(screens): Screen-Übersicht mit On-Demand-Screenshots für Multi-Screen-User 2026-03-24 14:27:10 +01:00
campaigns/messagewall Pruefe Layout-Validierung systematischer 2026-03-22 17:42:30 +01:00
config Security-Review + Phase 6: CSRF, Rate-Limiting, Tenant-Isolation, Screenshot, Ansible 2026-03-23 21:06:35 +01:00
db feat(db): screen_status-Tabelle für Display-Zustand 2026-03-26 23:05:15 +01:00
fileutil Security-Review + Phase 6: CSRF, Rate-Limiting, Tenant-Isolation, Screenshot, Ansible 2026-03-23 21:06:35 +01:00
httpapi fix(display): screen UUID lookup, authScreen middleware, JSON encoding 2026-03-26 23:35:05 +01:00
mqttnotifier fix(display): screen UUID lookup, authScreen middleware, JSON encoding 2026-03-26 23:35:05 +01:00
reqcontext Security-Review + Phase 6: CSRF, Rate-Limiting, Tenant-Isolation, Screenshot, Ansible 2026-03-23 21:06:35 +01:00
store feat(store): UpsertDisplayState für screen_status 2026-03-26 23:05:18 +01:00