3 Commits

Author	SHA1	Message	Date
Tetardtek	494206b5b3	feat: observability — Winston logging, pagination admin, N+1 playlists	2026-03-14 23:21:42 +01:00
Tetardtek	11d9432218	fix(routes): resolve superOAuthId → DB userId — critical auth bug ... req.user.id = SuperOAuth UUID, pas l'UUID TypeORM en DB. Sans ce fix : getUserPlanLevel retourne toujours 0, ownerId ne matche jamais. - video.routes: resolveDbUserId avant getUserPlanLevel - playlist.routes: resolveDbUserId sur toutes les opérations owner/member	2026-03-14 08:12:11 +01:00
Tetardtek	f3e392ff1b	feat(backend): mount API routes + cookie-parser + CORS with credentials ... - index.ts: mount /api/auth, /api/videos, /api/playlists; add cookie-parser; CORS with credentials + FRONTEND_URL env - auth.middleware: read token from Bearer header OR od_token httpOnly cookie - routes: auth (session/logout/me), videos (level-gated), playlists (CRUD + share management) - deps: cookie-parser + @types/cookie-parser	2026-03-14 07:10:47 +01:00