morz-infoboard/server/backend/internal/httpapi/manage
Jesko Anschütz 79fcc20b79 fix(display): screen UUID lookup, authScreen middleware, JSON encoding
- playerstatus: look up screen by slug before UpsertDisplayState to pass UUID (not slug) and avoid FK violation
- router: switch display command route from authOnly to authScreen for proper permission enforcement
- display.go: remove redundant GetBySlug + requireScreenAccess (now handled by authScreen middleware), drop store dependency
- notifier: replace fmt.Sprintf %q with json.Marshal for correct JSON encoding of display command payload

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-26 23:35:05 +01:00
..
static UX Block 2: Lösch-Modals, Status-Page Deutsch, Transitions, lokale Assets, Accessibility 2026-03-23 11:03:04 +01:00
auth.go fix(csrf): CSRF-Token für User-Logout in Manage- und Tenant-Dashboard 2026-03-24 14:26:52 +01:00
csrf_helpers.go Security-Review + Phase 6: CSRF, Rate-Limiting, Tenant-Isolation, Screenshot, Ansible 2026-03-23 21:06:35 +01:00
display.go fix(display): screen UUID lookup, authScreen middleware, JSON encoding 2026-03-26 23:35:05 +01:00
media.go Security-Review + Phase 6: CSRF, Rate-Limiting, Tenant-Isolation, Screenshot, Ansible 2026-03-23 21:06:35 +01:00
playlist.go fix(manage): HandleReorder gibt 400 bei Mismatch zurück, slog für 500-Fehler 2026-03-26 22:29:48 +01:00
register.go Security-Review + Phase 6: CSRF, Rate-Limiting, Tenant-Isolation, Screenshot, Ansible 2026-03-23 21:06:35 +01:00
static.go UX Block 2: Lösch-Modals, Status-Page Deutsch, Transitions, lokale Assets, Accessibility 2026-03-23 11:03:04 +01:00
templates.go feat(ui): Screen-Übersicht neu gestaltet 2026-03-25 08:27:18 +00:00
ui.go fix(manage): HandleReorder gibt 400 bei Mismatch zurück, slog für 500-Fehler 2026-03-26 22:29:48 +01:00