Pedro CastroandGitHub 51639e38d7 fix(auth): block OAuth linking for unverified accounts (#26598) ...

* fix(auth): sanitize unverified accounts during OAuth linking

- Add AccountSanitizationService for secure account cleanup
- Clear webhooks, API keys, credentials, and sessions for unverified accounts
- Reset password and 2FA settings during OAuth conversion
- Nullify redirect URLs on event types

Only affects accounts that never completed email verification

* fix(auth): block OAuth linking for unverified accounts

  Replace sanitization with simpler blocking approach:
  - Unverified CAL accounts cannot link to OAuth (Google/SAML)
  - Add user-friendly error message with recovery path
  - Remove AccountSanitizationService (no data loss risk)

2026-01-09 11:04:39 +00:00

..

_trpc

perf: rename eventTypes.heavy to eventTypesHeavy (#24630)

2025-10-23 07:32:06 -03:00

(booking-page-wrapper)

refactor: Move trpc-dependent components from features to web [2] (#26420)

2026-01-05 12:53:51 -03:00

(use-page-wrapper)

fix(auth): block OAuth linking for unverified accounts (#26598)

2026-01-09 11:04:39 +00:00

api

fix: add URL validation for logo fields (#26522)

2026-01-08 22:03:54 +00:00

cache

feat: upgrade apps/web to Next.js 16.1.0 (#26093)

2025-12-21 16:31:48 -03:00

e2e/session-warmup

feat: add lightweight E2E session warmup page (#26451)

2026-01-05 16:22:52 +00:00

icons

feat: rename --font-cal to --font-heading + use Cal Sans UI (#26064)

2026-01-09 10:42:23 +00:00

reschedule/[uid]

feat: Upgrade to Next 15 (#18834)

2025-03-20 21:30:51 -03:00

routing-forms/[...pages]

perf: Move runtime redirects to build-time redirects in next.config.js (#23325)

2025-08-26 20:20:12 +09:00

_types.ts

refactor: Get rid of usages of Next.js private interfaces in our codebase (#23080)

2025-08-14 09:51:49 -03:00

_utils.tsx

perf: og image caching v2 (#23189)

2025-10-29 10:36:17 -03:00

AppRouterI18nProvider.tsx

perf: make useLocale hook to use server-fetched i18n if in App router context (#20597)

2025-04-11 14:28:26 -07:00

CustomI18nProvider.tsx

feat: option to enforce language for bookingPage (#18782)

2025-05-18 01:12:26 -04:00

error.tsx

fix: improve booking page error boundary + remove dynamic imports from Booker (#20560)

2025-04-07 09:51:14 +03:00

favicon.ico

add favicon.ico to app/ (#14076)

2024-03-21 03:56:57 +00:00

GeoContext.tsx

feat: posthog version upgrade and added trackings (#24401)

2025-11-28 12:43:37 +00:00

global-error.tsx

fix: sentry builds (#20310)

2025-05-09 19:44:48 +00:00

layout.tsx

feat: rename --font-cal to --font-heading + use Cal Sans UI (#26064)

2026-01-09 10:42:23 +00:00

not-found.tsx

fix: Add CSP back to login page (#22688)

2025-07-26 01:38:20 +01:00

notFoundClient.tsx

feat: rename --font-cal to --font-heading + use Cal Sans UI (#26064)

2026-01-09 10:42:23 +00:00

page.tsx

chore: Implement onboarding redirect logic in event-types and main page components (#24785)

2025-10-30 13:44:11 +00:00

providers.tsx

feat: posthog version upgrade and added trackings (#24401)

2025-11-28 12:43:37 +00:00

SpeculationRules.tsx

perf: prerender routes in main navigation (#18883)

2025-01-25 18:30:07 +01:00

WithAppDirSsr.tsx

perf: Remove ssrInit completely (#20439)

2025-04-01 19:14:46 -04:00

WithEmbedSSR.test.ts

fix: Some recently discovered type errors breaking build (not sure why undetected before) (#18432)

2024-12-31 13:50:43 +00:00

WithEmbedSSR.tsx

perf: Remove ssrInit completely (#20439)

2025-04-01 19:14:46 -04:00