Suriya 39dcba3d80 fix: put the Redis user-cache utilities behind console auth ...

/api/v1/utils/users/redis exposed open CRUD — create, read, update and delete
on the cached-user store — to anonymous callers. The store is currently empty
and nothing in the console or apps calls it, so closing it breaks no client.

Third of the three route groups flagged in the 2026-07-27 audit. /crm/* stays
open by explicit decision: the field-sales Flutter app sends no credentials.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-05 18:23:59 +05:30

cmd

Initial commit including .env

2026-06-22 17:43:40 +05:30

config

fix: panic recovery, rate limiting, transaction error handling, pagination

2026-07-27 12:13:39 +05:30

constants

hub apis

2026-07-04 11:10:52 +05:30

controllers

fix: customer PIN-reset takeover, booking-quote and consignment-log IDORs

2026-08-05 18:20:47 +05:30

db

Initial commit including .env

2026-06-22 17:43:40 +05:30

docs

docs: runbook for creating a test booking and assigning a miler

2026-07-27 12:38:05 +05:30

dto

fix: console tenant scoping, miler identity spoofing, delivery proof, timezone

2026-08-05 18:16:56 +05:30

internal

feat: 14 new endpoints closing jupiter->Doormile API gaps, plus two tenant-scoping bug fixes

2026-08-05 12:22:39 +05:30

middlewares

fix: console tenant scoping, miler identity spoofing, delivery proof, timezone

2026-08-05 18:16:56 +05:30

migrations

feat: miler duty/break tracking, delivery confirmation, earnings, notifications, and support

2026-07-18 11:25:49 +05:30

models

fix: console tenant scoping, miler identity spoofing, delivery proof, timezone

2026-08-05 18:16:56 +05:30

routes

fix: put the Redis user-cache utilities behind console auth

2026-08-05 18:23:59 +05:30

scratch

fix: panic recovery, rate limiting, transaction error handling, pagination

2026-07-27 12:13:39 +05:30

utils

fix: console tenant scoping, miler identity spoofing, delivery proof, timezone

2026-08-05 18:16:56 +05:30

.env

hub apis

2026-07-04 11:10:52 +05:30

.env.example

fix: panic recovery, rate limiting, transaction error handling, pagination

2026-07-27 12:13:39 +05:30

.gitignore

fix: panic recovery, rate limiting, transaction error handling, pagination

2026-07-27 12:13:39 +05:30

CLAUDE.md

docs: record build/vet verification and commit c272a33 in CLAUDE.md

2026-08-05 12:31:34 +05:30

Dockerfile

fix: console tenant scoping, miler identity spoofing, delivery proof, timezone

2026-08-05 18:16:56 +05:30

doormile-abee7-66e9b8b66fb4.json

agentic mode

2026-06-30 12:03:04 +05:30

Enquiry.xlsx

Initial commit including .env

2026-06-22 17:43:40 +05:30

go.mod

fix: panic recovery, rate limiting, transaction error handling, pagination

2026-07-27 12:13:39 +05:30

go.sum

fix: panic recovery, rate limiting, transaction error handling, pagination

2026-07-27 12:13:39 +05:30

main.go

feat: allow https://hub.doormile.com in CORS

2026-07-27 12:18:16 +05:30

migration.txt

Initial commit including .env

2026-06-22 17:43:40 +05:30

seed_data.sql

Add assignment engine, FCM, WebSockets, city gate, and internal APIs

2026-06-25 12:31:53 +05:30

seed.go.bak

Initial commit including .env

2026-06-22 17:43:40 +05:30

Description

No description provided

2.9 MiB

Languages

Go 94.4%

PLpgSQL 4.3%

Python 1.1%

Dockerfile 0.2%