ravixalgorithmandClaude Opus 5.5 f1045c2ab4 fix(security): scope server actions to the signed-in user, load middleware, redact DB credentials ...

- Watchlist and alert actions took a userId from the client, so any signed-in user
  could add, remove or delete another user's data. They now read the session.
- middleware/index.ts was never loaded by Next.js (empty middleware manifest); moved
  to middleware.ts so signed-out requests redirect before any page code runs.
- Mongo connection log no longer prints the password.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-25 15:28:00 +05:30

..

models

feat: Integrate Siray.ai fallback, modernize docs, and migrate users

2026-01-30 00:10:35 +05:30

mongoose.ts

fix(security): scope server actions to the signed-in user, load middleware, redact DB credentials

2026-09-25 15:28:00 +05:30