Superadmin impersonation, hardened auth/upload paths, dependency updates

Browse Source

- Add superadmin impersonation: sessions.impersonated_by (migration 0003) is
  stamped onto audit rows so impersonated actions are attributable, with a
  persistent ImpersonationBanner in the app shell.
- Harden auth and upload handling across routes (safe redirect targets,
  filename sanitization, checkout grant handling).
- Update dependencies: Sentry 8 -> 10, @fastify/static 8 -> 10,
  react-router-dom 6.30.6; add find-my-way / fast-uri overrides.
- Add tests for safe-next, checkout-grant, and upload-filename.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

Leon Serfaty

2026-08-26 10:25:39 -04:00

co-authored by Claude Opus 5

parent 4a1122a7c9

commit eb36b81dc9

28 changed files with 7936 additions and 5763 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

packages/db/migrations/meta/0003_snapshot.json

+1841

File diff suppressed because it is too large Load Diff