2 Commits

Include renames

Author	SHA1	Message	Date
Summit Dental CareandClaude Sonnet 4.6	8154e904b9	security: restrict network-backup endpoints to LAN IPs only ... Requests from outside 10.x, 192.168.x, 172.16-31.x, 127.x are rejected with 403 before the API key is even checked. This prevents the database dump endpoint from being reachable from the internet even if the key leaked. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-22 23:53:28 -04:00
Summit Dental CareandClaude Sonnet 4.6	fcf6effb7b	fix: move network-backup endpoints outside JWT auth middleware ... The /network-backup and /network-backup-files routes use their own X-Network-Backup-Key authentication. Mounting them behind authenticateJWT blocked all receiver sync requests before they could be validated. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-22 23:50:19 -04:00