stwaidele/dorfteich
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases 22 Wiki Activity

M17–M19: #133–#137 (Kommentare inline, Statuszeile, Transklusion, Excalidraw, Checkbox-Fix) #138

Merged
fable-5 merged 10 commits from m17-m19-issues into main 2026-07-19 09:38:38 +02:00
Conversation 0 Commits 10 Files Changed 41 +4
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit d5b895ada2 - Show all commits

4
apps/api/src/public/read-content.controller.ts
View File

@ -1,6 +1,7 @@
import { Controller, Get, Param, Req } from '@nestjs/common'; import { Controller, Get, Param, Req } from '@nestjs/common';
import { AuthedRequest } from '../auth/auth.guard'; import { AuthedRequest } from '../auth/auth.guard';
import { AuthenticatedOnly } from '../permissions/permission.decorators';
import { PublicPageContent, PublicService } from './public.service'; import { PublicPageContent, PublicService } from './public.service';
/** /**
@ -16,7 +17,10 @@ import { PublicPageContent, PublicService } from './public.service';
export class ReadContentController { export class ReadContentController {
constructor(private readonly publicPages: PublicService) {} constructor(private readonly publicPages: PublicService) {}
// Session required (explicit access rule, issue #52); per-page read
// permission is enforced in the service (resolve → canAccessPage → 404).
@Get(':pondSlug/:pageSlug') @Get(':pondSlug/:pageSlug')
@AuthenticatedOnly()
async content( async content(
@Param('pondSlug') pondSlug: string, @Param('pondSlug') pondSlug: string,
@Param('pageSlug') pageSlug: string, @Param('pageSlug') pageSlug: string,