Files

bert.hausmans b5fcb7c14a fix: add Google Fonts domains to CSP policy

Vuexy loads fonts via webfontloader from fonts.googleapis.com and
fonts.gstatic.com. The previous CSP blocked these, causing a white screen.

- style-src: added https://fonts.googleapis.com
- font-src: added https://fonts.gstatic.com
- Removed frame-ancestors from meta tags (ignored in meta, console warnings)

Updated in all three index.html dev meta tags and both Nginx SPA/portal configs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-14 16:20:51 +02:00

public

chore: add Mock Service Worker public asset

2026-04-10 11:16:52 +02:00

src

security: migrate auth tokens to httpOnly cookies (hybrid bearer token approach)

2026-04-14 16:06:44 +02:00

auto-imports.d.ts

feat(app): auth, orgs/events UI, router guards, and dev tooling

2026-04-07 21:51:10 +02:00

components.d.ts

feat(mail): center-align action button in email template

2026-04-14 00:49:41 +02:00

dev.Dockerfile

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

docker-compose.dev.yml

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

docker-compose.prod.yml

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

env.d.ts

feat(mail): center-align action button in email template

2026-04-14 00:49:41 +02:00

index.html

fix: add Google Fonts domains to CSP policy

2026-04-14 16:20:51 +02:00

nginx.conf

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

package.json

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

pnpm-lock.yaml

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

prod.Dockerfile

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

README 2.md

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

README.md

chore: align migrations, docs, and frontends with crewli.app setup

2026-04-07 10:45:34 +02:00

shims.d.ts

refactor: align codebase with EventCrew domain and trim legacy band stack

2026-03-29 23:19:06 +02:00

themeConfig.ts

feat(mail): center-align action button in email template

2026-04-14 00:49:41 +02:00

tsconfig.json

feat(app): auth, orgs/events UI, router guards, and dev tooling

2026-04-07 21:51:10 +02:00

typed-router.d.ts

feat: password reset, email change with verification, and password change

2026-04-14 15:38:54 +02:00

vite.config.ts

security: round 4 — frontend hardening (deps, XSS, cookie security)

2026-04-14 07:15:00 +02:00

README.md

Crewli — Organizer SPA

Main product UI for organisation and event staff (Vue 3 + Vuexy + Vuetify). Lives in this repo; only re-copy from Vuexy when upgrading the template.

Setup

Install dependencies:

pnpm install

Create .env.local:

VITE_API_URL=http://localhost:8000/api/v1
VITE_APP_NAME="Crewli Organizer"

Dev server uses port 5174 (see vite.config.ts or run from repo root: make app).

pnpm dev --port 5174

Port

Runs on http://localhost:5174

Production: e.g. VITE_API_URL=https://api.crewli.app/api/v1 and host the SPA at https://app.crewli.app (see api/.env.example for FRONTEND_APP_URL and SANCTUM_STATEFUL_DOMAINS).