Repository navigation

feat(email): post-execution notification with one-click revoke (closes #291) - #889

Merged

cristim merged 20 commits into

mainfrom

Jul 16, 2026

Commits on Jul 16, 2026

feat(email): post-execution notification with one-click revoke (closes #291)
cristim
committed
b93b1d8
refactor(api/purchases): extract sendPurchaseExecutedEmail + revokePurchase helpers to fit gocyclo budget
cristim
committed
2f1b0f5
fix(api/purchases): enforce revoke-token expiry, atomic status, PII-safe log
cristim
committed
f5cc619
fix(api/middleware): exact-match /version to prevent auth bypass via prefix
cristim
committed
90d29d7
fix(api/purchases): send executed notification from direct-execute path (#291)
cristim
committed
27f1b77
test(api,email): cover executed-notification send/render for all paths (#291)
cristim
committed
f402c04
fix(api/test): repair broken Session.Role literal and gofmt drift
cristim
committed
23fd6ce
fix(auth): align requiresCSRFValidation with exact-match + gofmt middleware_test
cristim
committed
18a5f5c
fix(api/test): update requiresCSRFValidation call to 3-arg signature
cristim
committed
01872c3
fix(api/purchases): GET /revoke renders confirmation form; only POST mutates (CRITICAL: email prefetchers)
cristim
committed
a31938d
fix(purchase/approvals): rotate ApprovalToken on approve/cancel so a leaked token cannot revoke later
cristim
committed
6b02807
fix(api/middleware,purchases): redact token in request logs; POST revoke reads token from body
cristim
committed
d3ebc7f
feat(purchase/revoke): enforce 24h revocation window matching the email copy
cristim
committed
d2ebcdf
fix(purchase): fold CancelledBy into Transition write to avoid lost-update clobber
cristim
committed
ffa5552
sec(purchase/revoke): SHA-256 both inputs before constant-time-compare
cristim
committed
9d73218
fix(api/purchases): log requester-info lookup failures (audit trail)
cristim
committed
7a85d99
fix(api/purchases): wire approveViaToken notification; rename revoke handler; fix mock sigs
cristim
committed
ae80158
fix(purchase): mint fresh revocation token after token-authed approve
cristim
committed
154a786
fix(purchase): suppress Revoke panel on email re-fetch failure
cristim
committed
52b6393
style(purchase): clear full golangci-lint findings on the revoke path
cristim
committed
a7961a1