3252a8
11187487b4
chore: run lint and prettifier
2026-05-12 21:54:12 +03:00
3252a8
475a1953d1
feat: tune visual of web app admin panel, tune limit messages and etc
2026-05-12 15:42:17 +03:00
3252a8
b759ddb0f5
feat: tune premium squads visual in web app
2026-05-11 00:15:29 +03:00
3252a8
e01f56bc34
feat: tune visual of web app admin panel
2026-05-10 20:19:43 +03:00
3252a8
b7e497e241
Merge branch 'dev' into feature/new-tariffs
2026-05-10 13:18:39 +03:00
3252a8
7a81a2f20b
fix: telegram oauth
2026-05-10 13:17:21 +03:00
3252a8
990eba1e1e
feat: premium squads inside one tariff
2026-05-10 12:51:53 +03:00
3252a8
6f9a87cf98
feat: admin dashboard
2026-05-09 22:32:44 +03:00
3252a8
7dc4806be7
Merge branch 'dev' into feature/new-tariffs
2026-05-07 22:23:04 +03:00
3252a8
8783129c16
fix: webapp accesability when tg is unreachable
2026-05-06 21:39:11 +03:00
3252a8
aa5a9496ed
feat: hwid limits and topups
2026-05-03 22:36:33 +03:00
3252a8
00f8e5fb20
Merge branch 'dev' into feature/new-tariffs
...
# Conflicts:
# bot/services/stars_service.py
2026-05-03 22:19:04 +03:00
3252a8
ca8df10eab
fix: telegram stars payment in web app
2026-05-03 18:10:20 +03:00
3252a8
77f2420ae3
Merge branch 'dev' into feature/new-tariffs
2026-04-30 22:58:12 +03:00
3252a8
4de730bf5a
feat: add Telegram OAuth login flow
2026-04-30 19:50:17 +03:00
3252a8
8a6b2704d4
feat: new tariffs web app and bot interactions
2026-04-30 13:48:32 +03:00
3252a8
ce610b4804
Merge branch 'dev' into feature/new-tariffs
...
# Conflicts:
# .gitignore
# bot/app/web/subscription_webapp.py
# tests/test_settings.py
2026-04-30 10:52:20 +03:00
3252a8
2c1e86863d
feat: support hwid in web app
2026-04-30 09:25:43 +03:00
3252a8
16b11327ee
fix: traffic strategy
2026-04-30 07:57:14 +03:00
3252a8
3d5998b8fb
feat: support traffic and trial flow in web app
2026-04-30 07:34:29 +03:00
3252a8
2df4d2d770
feat: tune webapp visual
2026-04-30 00:06:31 +03:00
3252a8
4ce78f277e
feat: migrate to svelte initial
2026-04-29 11:10:12 +03:00
3252a8
d7d5c2b1ef
refactor: remove local storing tg js
2026-04-28 23:33:24 +03:00
3252a8
258b2f4dec
feat: align tariff resets to calendar month
2026-04-28 15:25:46 +03:00
3252a8
829758dc44
feat: update tariff UI and mini app
2026-04-28 14:34:12 +03:00
3252a8
aabc0e312d
feat: log email and tg linking
2026-04-28 13:54:05 +03:00
3252a8
dd0e6e75af
feat: add magic login link to email with login codes
2026-04-28 09:50:17 +03:00
3252a8
0251f939d7
feat: log users when reg via email
2026-04-27 23:29:28 +03:00
3252a8
a00bc0f345
feat: design for emails
2026-04-27 23:05:14 +03:00
3252a8
70b618a94b
feat: use web page for cryptopay in web app
2026-04-27 14:38:09 +03:00
3252a8
0610156f80
feat: add multiple platega buttons
2026-04-27 14:34:41 +03:00
3252a8
f416b0aed1
fix(webapp): allow oauth.telegram.org iframe in CSP
...
The Telegram Login Widget embeds oauth.telegram.org in an iframe; without
an explicit frame-src directive it fell back to default-src 'self' and was
blocked. Add frame-src https://oauth.telegram.org so the login flow loads.
2026-04-27 09:34:09 +03:00
3252a8
c8192e4427
fix(webapp): allow inline JSON config and Telegram widget eval under CSP
...
Add a per-request nonce to inline <script type="application/json"> blocks
(webapp-config, i18n) so they survive script-src 'self' and locales/config
actually load in the browser. Also add 'unsafe-eval' to script-src so the
vendored telegram-widget.js (which uses eval/new Function) can initialise.
2026-04-27 09:31:52 +03:00
3252a8
4740666d63
chore: annotate XTR provider_token and add missing return type
2026-04-27 08:43:54 +03:00
3252a8
d60952718e
security: harden Mini App auth, CSRF, and validation
2026-04-26 20:33:54 +03:00
3252a8
5ec179b6d6
webapp: add hashed minified asset pipeline
2026-04-26 20:04:30 +03:00
3252a8
c2afc6107a
webapp: harden mini app rendering and controls
2026-04-26 19:47:06 +03:00
3252a8
7e26f9da9b
feat: automatic merge two paid subs (email and tg)
2026-04-24 23:07:57 +03:00
3252a8
778615a97f
feat: tune web app visual
2026-04-24 22:35:55 +03:00
3252a8
651572f15f
refactor: show tg avatar in detached browser
2026-04-24 21:31:58 +03:00
3252a8
5ccb8ddabe
refactor: promo and email bruteforce defence
2026-04-24 21:18:29 +03:00
3252a8
86f944e544
feat: tune web app visual
2026-04-24 21:04:53 +03:00
3252a8
bc29f5ebd6
feat: promocode and ref in web app
2026-04-24 13:52:53 +03:00
3252a8
807a8933b9
feat: email login, smtp codes
2026-04-23 21:20:32 +03:00
3252a8
b9cb1fec06
feat: tune webapp visual, use telegram widget for login
2026-04-23 14:06:21 +03:00
3252a8
4f1b7d0832
feat: web app
2026-04-22 16:00:55 +03:00
3252a8