Nach gültigem Server-Cookie wird automatisch Passkey oder PIN zum Entsperren angeboten, statt die komplette Anmelde-Maske zu zeigen.
Co-authored-by: Cursor <cursoragent@cursor.com>
KPI-Karten bleiben auf schmalen Viewports in zwei Spalten, Header und Filter nutzen weniger vertikalen Platz.
Co-authored-by: Cursor <cursoragent@cursor.com>
Docker Compose did not forward the admin whitelist from .env, so production always treated every user as non-admin.
Co-authored-by: Cursor <cursoragent@cursor.com>
Show login instead of AdminDashboard on /admin when unauthenticated to avoid pointless admin API calls.
Co-authored-by: Cursor <cursoragent@cursor.com>
Detect admin access after login and expose a header button that opens /admin via client-side routing so the session stays unlocked when returning to the app.
Co-authored-by: Cursor <cursoragent@cursor.com>
Updated various components to utilize parseAppDecimal and formatAppDecimal for consistent decimal parsing and formatting. This change enhances the handling of numeric inputs across the application, ensuring better accuracy and user experience in forms and displays.
Der tote Ternär lieferte in beiden Zweigen dieselbe Rundung; ab 100 m
wird jetzt auf 10 m gerundet, damit schwache Fixes nicht falsch präzise wirken.
Co-authored-by: Cursor <cursoragent@cursor.com>
Nutzer sehen spezifische Meldungen bei GPS-Problemen, eine Schätzung des
Empfangs aus der Browser-Genauigkeit und beim ersten Live-Log-Besuch nur
dann einen Freigabe-Hinweis, wenn die Standortberechtigung noch offen ist.
Co-authored-by: Cursor <cursoragent@cursor.com>
Prüft videoinput-Geräte beim Öffnen des Foto-Modals und zeigt eine
klare Meldung statt leerem Kamera-UI; getUserMedia-Fehler differenziert.
Co-authored-by: Cursor <cursoragent@cursor.com>
Stellt sicher, dass signSkipper und signCrew gemeinsam für den
Punktewert bei der Auswahl des Tageseintrags ausgewertet werden.
Co-authored-by: Cursor <cursoragent@cursor.com>
Live-journal uploads are tracked only via Photo Uploaded and Voice Memo Uploaded with context live_log.
Co-authored-by: Cursor <cursoragent@cursor.com>
Let users support project development and running costs via ko-fi.com/kapteinsdaagbok, with i18n tooltips and Plausible tracking.
Co-authored-by: Cursor <cursoragent@cursor.com>
The download button stays inactive until both fields agree and meet
the minimum length, so users cannot start export with a mismatch.
Co-authored-by: Cursor <cursoragent@cursor.com>
ZIP .daagbok files use a compact manifest and binary KDAB blobs so large
photo, voice, and GPS payloads no longer inflate in a single JSON file.
Co-authored-by: Cursor <cursoragent@cursor.com>
Record short E2E-encrypted audio attachments from the live log, link them to events via __live:voice markers, and play them back in the stream and chronological event table.
Co-authored-by: Cursor <cursoragent@cursor.com>
Correct owner detection while the logbook loads, preserve AI summaries on
live-log saves, skip corrupt entry decrypts, and never regenerate keys for
shared logbooks.
Co-authored-by: Cursor <cursoragent@cursor.com>
Users see localized feedback when OpenWeatherMap or travel-day summary
features are used without connectivity, instead of generic API errors.
Co-authored-by: Cursor <cursoragent@cursor.com>
Account deletion, key enrollment, and credential management use a separate 30/15min limiter so they are not left at 300/min while login and sync routes stay independent.
Co-authored-by: Cursor <cursoragent@cursor.com>
Forward X-Forwarded-For through frontend nginx, use TRUST_PROXY=1 for the Docker hop, and limit auth rate limiting to login flows only.
Co-authored-by: Cursor <cursoragent@cursor.com>
EventTimeInput24h switches to input type=time on touch devices while keeping dual selects on desktop for reliable 24h entry.
Co-authored-by: Cursor <cursoragent@cursor.com>
Global theme-aware scrollbar styling replaces the thin 6px event-table bar so long forms are easier to scroll on mobile.
Co-authored-by: Cursor <cursoragent@cursor.com>
elpatronandCursor