curo1305 87c7cc193a Harden admin route visibility: 404 not 403, redirect to /login ...

- deps.py: get_current_admin returns 404 Not Found for non-superusers instead
  of 403 Forbidden — hides endpoint existence from unauthorised callers
- App.tsx: AdminRoute redirects non-admins to /login instead of /, making
  the route indistinguishable from a non-existent page

Layer 3 (network-level IP restriction via Traefik) tracked in TODO.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-13 18:46:33 +02:00

..

core

Add profile feature, input sanitization, and stronger security checks

2026-04-13 18:15:47 +02:00

models

Add profile feature, input sanitization, and stronger security checks

2026-04-13 18:15:47 +02:00

routers

Add admin user management with role-gated access

2026-04-13 18:40:05 +02:00

schemas

Add admin user management with role-gated access

2026-04-13 18:40:05 +02:00

__init__.py

Initial project scaffold: FastAPI + React/Vite + PostgreSQL SaaS starter

2026-04-12 15:00:44 +02:00

database.py

Initial project scaffold: FastAPI + React/Vite + PostgreSQL SaaS starter

2026-04-12 15:00:44 +02:00

deps.py

Harden admin route visibility: 404 not 403, redirect to /login

2026-04-13 18:46:33 +02:00

main.py

Add admin user management with role-gated access

2026-04-13 18:40:05 +02:00