Alex ad7ce9dc22 Security fix: GM authorized from server-side session via x-session-id header ...

- New database/auth.js: shared server-side GM check using session store
- database/server.js: crypto-random session generation, server-side session
  storage, GM auth from session instead of x-gm-secret header
- database/routes/playerRoutes.js: GM-only endpoints use server-side auth
- database/routes/sessionRoutes.js: session creation/lookup endpoints
- database/routes/bestiaryRoutes.js: GM auth from server-side session
- database/routes/rulesRoutes.js: GM auth from server-side session
- src/App.js: send x-session-id header with API requests
- src/components/BestiaryTab.jsx: use session-based GM auth

2026-07-16 23:03:52 +02:00

..

backups

Refactor code structure for improved readability and maintainability

2025-08-20 15:29:22 +02:00

database/backups

feat: Add validation and normalization utilities for player records

2025-08-16 12:15:32 +02:00

deploy

Moves GM player management to PlayerTab

2025-08-15 11:12:49 +02:00

legacy

feat: Add validation and normalization utilities for player records

2025-08-16 12:15:32 +02:00

migrations

Refactor code structure for improved readability and maintainability

2025-08-20 15:29:22 +02:00

remote-extract

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

routes

Security fix: GM authorized from server-side session via x-session-id header

2026-07-16 23:03:52 +02:00

rules

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

scripts

Remove orphaned SQLite-era scripts

2026-06-30 12:19:15 +02:00

alexei-canonical.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

alexei-pages.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

alexei-parse.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

alexei-pdfjs.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

auth.js

Security fix: GM authorized from server-side session via x-session-id header

2026-07-16 23:03:52 +02:00

backend.log

Fix player weapon damage/types: christoffer weapons had empty damage, claes Power Fist type fixed

2026-07-02 18:20:33 +02:00

deathwatch_skills_p94_107.csv

Refactor code structure for improved readability and maintainability

2025-08-20 15:29:22 +02:00

deathwatch-bestiary-extracted.backup.1755378403365.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

deathwatch-bestiary-extracted.backup.1755378500315.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

deathwatch-bestiary-extracted.backup.1755378808770.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

deathwatch-bestiary-extracted.backup.1755446586232.json

feat: Implement bestiary routes for data retrieval and management

2025-08-17 18:15:39 +02:00

deathwatch-bestiary-extracted.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.backup

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

deathwatch-bestiary-extracted.json.backup.1755435580792.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

deathwatch-bestiary-extracted.json.backup.1755447098350.json

feat: Implement bestiary routes for data retrieval and management

2025-08-17 18:15:39 +02:00

deathwatch-bestiary-extracted.json.pre-horde.1782997759427.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-hydrate.1782994078947.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-hydrate.1782995062957.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-hydrate.1782996147487.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-hydrate.1782996148717.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-hydrate.1782996187140.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-hydrate.1782996188348.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-hydrate.1782996221357.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-hydrate.1782996222577.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-hydrate.1782996255987.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-hydrate.1782996257218.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782991552178.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782991709648.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782992887220.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782992915682.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782992937588.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782994079362.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782994318111.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782994341678.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782995063322.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782996148983.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782996188651.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782996222933.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

deathwatch-bestiary-extracted.json.pre-sanitize.1782996257591.json

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

fix_flatten_tabinfo.js

new version

2025-08-15 10:35:27 +02:00

mariadb-schema-update.sql

refactor: Migrate database from SQLite to MariaDB

2025-12-11 19:20:44 +01:00

mariadb.js

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

migrate-inventory-to-gear.js

refactor: Migrate database from SQLite to MariaDB

2025-12-11 19:20:44 +01:00

migrate-sqlite-to-mariadb.js

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

MIGRATION_COMPLETE.md

new version

2025-08-15 10:35:27 +02:00

npcs-api-list.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

npcs-api.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

pm2.config.js

Fix bestiary data: sync profiles, armour, movement from stats; fix cross-contaminated entries

2026-07-02 17:36:41 +02:00

pregen_names.json

feat: Add validation and normalization utilities for player records

2025-08-16 12:15:32 +02:00

public

fix1

2025-08-15 16:23:34 +02:00

search-alexei.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

search-keywords.json

feat: Add scripts for upserting and validating bestiary data

2025-08-17 16:21:00 +02:00

server.js

Security fix: GM authorized from server-side session via x-session-id header

2026-07-16 23:03:52 +02:00

server.log

feat: Add validation and normalization utilities for player records

2025-08-16 12:15:32 +02:00

sessionModel.js

Fix login UI: add user dropdown selector, fix build syntax error

2026-06-23 14:43:51 +02:00

shop-helpers.js

Add migration script to import JSON data into SQLite database

2025-08-17 19:14:29 +02:00

switch-db.sh

new version

2025-08-15 10:35:27 +02:00

validate.js

feat: Add validation and normalization utilities for player records

2025-08-16 12:15:32 +02:00