bert.hausmans ddf26dad33 feat: platform admin backend — controllers, services, routes, tests ...

Add cross-organisation admin API endpoints behind role:super_admin middleware:
- AdminOrganisationController: CRUD with search, filter, billing_status management
- AdminUserController: user management with role assignment across orgs
- AdminStatsController: platform-wide aggregate statistics
- AdminActivityLogController: filterable activity log viewer
- AdminImpersonationController + ImpersonationService: user impersonation with
  token-based session management and activity logging
- BillingStatus enum, form requests, API resources, 23 feature tests

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-14 23:33:16 +02:00

..

Admin

feat: platform admin backend — controllers, services, routes, tests

2026-04-14 23:33:16 +02:00

Portal

feat: portal cross-event my-shifts endpoint and dashboard page

2026-04-14 15:07:08 +02:00

AssignablePersonsTest.php

security: A01-13 — nest all event routes under organisation prefix

2026-04-14 08:16:36 +02:00

CheckEmailTest.php

…

EmailChangeTest.php

feat: password reset, email change with verification, and password change

2026-04-14 15:38:54 +02:00

EventImageUploadTest.php

security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

2026-04-14 06:38:19 +02:00

MePortalEventsTest.php

feat(api): add portal_events to auth/me endpoint

2026-04-13 07:38:59 +02:00

PasswordChangeTest.php

feat: password reset, email change with verification, and password change

2026-04-14 15:38:54 +02:00

PasswordResetTest.php

feat: password reset, email change with verification, and password change

2026-04-14 15:38:54 +02:00

PersonApprovalEmailTest.php

security: A01-13 — nest all event routes under organisation prefix

2026-04-14 08:16:36 +02:00

PortalMeUpcomingShiftTest.php

security: round 1 — quick wins (rate limiting, headers, mass assignment, logging)

2026-04-14 01:34:51 +02:00

PublicRegistrationDataTest.php

…

RegistrationSettingsTest.php

security: A01-13 — nest all event routes under organisation prefix

2026-04-14 08:16:36 +02:00

ShiftAssignmentWorkflowTest.php

fix: allow organiser to approve shift assignments when shift is full

2026-04-14 17:42:04 +02:00

VolunteerRegistrationTest.php

security: round 3 — token security (crypto random, hashed storage, portal middleware)

2026-04-14 06:52:54 +02:00