Josh ca66346dc5 feat: add safe admin user removal (#3131) ...

* feat: add safe admin user removal

* fix: address user removal review findings

* fix: close remaining user removal review gaps

* fix: handle deleted users during session creation

* fix: fail closed when session creation fails

* fix: reject token issuance for inactive users

2026-08-22 21:54:32 +02:00

..

accounts_controller.rb

feat(api): expose budget state (#1640)

2026-05-06 20:50:46 +02:00

auth_controller.rb

feat: add safe admin user removal (#3131)

2026-08-22 21:54:32 +02:00

balance_sheet_controller.rb

Add GET /api/v1/summary endpoint and display net worth on mobile home (#1145)

2026-03-22 14:48:10 +01:00

balances_controller.rb

feat(api): expose balance history (#1641)

2026-05-05 19:09:36 +02:00

base_controller.rb

fix(api): prevent API auth from inheriting impersonation (#2405)

2026-06-19 17:14:43 +02:00

budget_categories_controller.rb

feat(budgets): add per-user personal budgets with strict isolation (#2891)

2026-08-18 08:36:46 +02:00

budgets_controller.rb

feat(budgets): add per-user personal budgets with strict isolation (#2891)

2026-08-18 08:36:46 +02:00

categories_controller.rb

feat(api): allow creating categories via API (#1676)

2026-05-06 22:59:55 +02:00

chats_controller.rb

refactor(api): scope controllers through current_resource_owner (#2414)

2026-06-28 21:59:44 +02:00

family_exports_controller.rb

feat(api): expose family exports (#1632)

2026-05-03 11:29:29 +02:00

family_settings_controller.rb

feat(api): expose family settings (#1645)

2026-05-03 23:10:46 +02:00

holdings_controller.rb

fix(api): scope holdings API to accessible accounts (#2706)

2026-07-25 04:44:27 +02:00

import_sessions_controller.rb

refactor(api): scope controllers through current_resource_owner (#2414)

2026-06-28 21:59:44 +02:00

imports_controller.rb

refactor(imports): focus Sure preflight scope (#1833)

2026-06-03 00:37:21 +02:00

merchants_controller.rb

feat(merchants): add raw data import (csv) for merchants (#1992)

2026-06-06 16:33:32 +02:00

messages_controller.rb

refactor(api): scope controllers through current_resource_owner (#2414)

2026-06-28 21:59:44 +02:00

provider_connections_controller.rb

refactor(api): scope controllers through current_resource_owner (#2414)

2026-06-28 21:59:44 +02:00

recurring_transactions_controller.rb

feat(api): expose family exports (#1632)

2026-05-03 11:29:29 +02:00

rejected_transfers_controller.rb

feat(exports): preserve transfer decisions (#1639)

2026-05-08 23:03:57 +02:00

rule_runs_controller.rb

refactor(api): scope controllers through current_resource_owner (#2414)

2026-06-28 21:59:44 +02:00

rules_controller.rb

feat(api): expose rule run history (#1646)

2026-05-03 23:33:35 +02:00

securities_controller.rb

feat(api): expose securities and price history (#1642)

2026-05-05 01:08:43 +02:00

security_prices_controller.rb

feat(api): expose securities and price history (#1642)

2026-05-05 01:08:43 +02:00

sync_controller.rb

security: sanitize exception messages in v1 API responses (FIX-11) (#1521)

2026-04-19 18:38:23 +02:00

syncs_controller.rb

refactor(api): scope controllers through current_resource_owner (#2414)

2026-06-28 21:59:44 +02:00

tags_controller.rb

fix(api): Use authorize_scope! for merchants and tags controllers (#643)

2026-01-14 11:22:19 +01:00

test_controller.rb

Add comprehensive API v1 with OAuth and API key authentication (#2389)

2025-06-17 15:57:05 -05:00

trades_controller.rb

Add support for dividend, deposit, withdrawal, and interest trade types to Trades API (#1761)

2026-06-13 11:55:16 +02:00

transactions_controller.rb

update transactions_controller (#1953)

2026-07-26 01:42:18 +02:00

transfers_controller.rb

feat(exports): preserve transfer decisions (#1639)

2026-05-08 23:03:57 +02:00

usage_controller.rb

Add comprehensive API v1 with OAuth and API key authentication (#2389)

2025-06-17 15:57:05 -05:00

users_controller.rb

refactor(api): scope controllers through current_resource_owner (#2414)

2026-06-28 21:59:44 +02:00

valuations_controller.rb

feat(exports): add rule operand references (#1726)

2026-05-12 21:29:29 +02:00