UniqueSoft/TenerifeProp
2
0
Fork 0
Code Issues 13 Pull Requests Actions Packages Projects Releases Wiki Activity
72 Commits 3 Branches 0 Tags
4af3e7cd9d403673ba02e8d135e89424d26d417e
Commit Graph

6 Commits

Author SHA1 Message Date
APAW Agent Sync
08e2d21f7d fix(client): use getAdminProperties in admin panel 
- Add getAdminProperties() to api.js with admin endpoint
- Update admin.js loadProperties() to use getAdminProperties
- Returns full dataset with admin filtering support

Refs: production admin panel
 2026-05-14 09:26:22 +01:00
Kilo
916455351d fix(admin): connect api.js and admin.js, fix property modal, add analytics endpoint 
- admin.html: removed conflicting inline script, added api.js + admin.js
- admin.js: dynamic section loader with fetch, init navigates to hash
- api.js: credentials: 'include' for all admin requests
- propertyModal: added name attributes to all form fields, saveProperty onclick handler
- server/index.ts: added POST /api/analytics/event with daily aggregation
- server/validation.ts: removed min(6) from password for 401 on invalid credentials
- capability-index.yaml: added 11 MCP capability routes
- docker-compose-mcp.yml: created for MCP servers
 2026-04-27 11:42:05 +01:00
TenerifeProp Dev
343a9381e1 feat: add real data to admin dashboard with charts 
- Add analytics tables (analytics_events, analytics_daily)
- Add /api/admin/leads endpoint for lead listing
- Add /api/admin/analytics/overview and /api/admin/analytics/charts endpoints
- Seed database with 15 leads and 30 days of analytics data
- Update dashboard.html with:
  - Animated counters for stats
  - Performance chart (views/leads over 6 months)
  - Leads status pie chart
  - Property types bar chart
  - Traffic sources doughnut chart
  - Top properties horizontal bar chart
  - Recent properties table with images
  - Recent leads list with status badges
- Add API methods: getAnalyticsOverview(), getAnalyticsCharts()
 2026-04-06 10:54:26 +01:00
TenerifeProp Dev
e6ea1400d6 feat: implement administrative section with authentication and seed data 
## Features Added

### Admin Login Page (public/login.html)
- Professional login UI with Bootstrap 5
- Email/password authentication
- CSRF protection
- Rate limiting protection
- Session persistence (7 days)
- Remember me functionality
- Language: Spanish with translations ready

### Authentication Middleware (src/server/index.ts)
- Session-based authentication using SQLite
- bcrypt password hashing
- CSRF token endpoint for form protection
- Auth check on admin.html page load
- Logout endpoint

### API Client Enhancements (public/js/api.js)
- Added auth methods: login(), logout(), getMe(), getCsrfToken()
- CRUD methods for all admin entities:
  - Properties: create, update, delete
  - Leads: get, update, delete
  - Testimonials: create, update, delete
  - FAQ: create, update, delete
  - Services: create, update, delete
  - Settings: get, update
- Admin stats endpoint

### Comprehensive Seed Data (src/db/seed-comprehensive.ts)
- 36 properties of all types:
  - 8 urban lands
  - 10 agricultural plots
  - 8 houses/villas
  - 10 apartments
- Real Tenerife locations with coordinates
- Spanish and Russian translations
- 8 testimonials from international clients
- 8 FAQ items (buying process, taxes, etc.)
- 6 services offered
- Admin user: admin@tenerifeprop.com / admin123
- Stock photos from Unsplash

### Tests (tests/auth.test.ts)
- Authentication tests
- Session management tests
- Property CRUD tests
- Input validation tests
- XSS prevention tests
- Email/phone validation tests

## Why These Changes

1. Security: Authentication protects admin routes from unauthorized access
2. Data: Seed data provides realistic content for testing and demo
3. UX: Professional login page improves user experience
4. Testing: Tests ensure reliability and catch regressions

## Breaking Changes
None - all changes are additive

## Related Issues
- Closes #28 (Admin Login Page)
- Closes #29 (Seed Data Generation)
- Closes #30 (Tests Implementation)

## Milestone
Administrative Section Implementation (#51)
 2026-04-06 00:21:34 +01:00
TenerifeProp Dev
503eb8a62f feat: implement property page navigation and security fixes 
- Fix XSS vulnerabilities with escapeHtml() utility
- Fix SQL injection in admin endpoints with column whitelisting
- Add CSRF protection middleware
- Remove hardcoded password backdoor
- Implement property navigation functions
- Add test coverage

Closes #9
 2026-04-05 01:34:48 +01:00
TenerifeProp Dev
c1867fe074 feat: implement complete backend with Bun + Hono + SQLite 
- Create SQLite database schema with all tables
- Implement REST API endpoints for properties, leads, testimonials, FAQ, services
- Add seed data with sample properties, testimonials, FAQ
- Create Docker configuration for deployment
- Add i18n system for translations
- Add API client for frontend integration
- Create Technical Documentation (TZ.md)
- Add detailed README with deployment instructions

🚀 Project is now fully functional:
- API: http://localhost:8080/api/*
- Properties CRUD with filtering
- Lead management
- Settings, Testimonials, FAQ, Services APIs
- SQLite database with seed data
 2026-04-04 22:16:06 +01:00