Jared Wolff 4293a30d50 fix(setup): use /api/setup endpoint for admin creation ...

The admin setup form was calling /api/auth/register which creates a
regular user (role is hardcoded to User) and never sets the
system_initialized flag. Switch to /api/setup which creates an actual
admin and marks the system as initialized. Add setup token input field.

2026-03-05 13:43:06 -05:00

..

app

fix(auth): await logout fetch to prevent token refresh race condition

2026-03-05 13:43:06 -05:00

core

security: fix vulnerabilities 1-7 from security audit

2026-03-05 13:15:34 +01:00

features

fix(setup): use /api/setup endpoint for admin creation

2026-03-05 13:43:06 -05:00

views

fix(profile): add credentials to fetch calls so auth cookies are sent

2026-03-05 13:43:06 -05:00