John Cardinal a807693187 case 4719 - report templates no longer hold the renderer's token or download key ...

The report page gets placeholders for the token and download key; request
interception (ReportApiRelay, now in every kind of install) puts the real
values only on the page's requests to ayApiUrl, then relays them (IIS) or
lets the browser continue. Requests to other addresses go out unchanged,
without credentials. Notification reports keep their rights. Report
scripting manual and changelog updated. F20 fixed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-25 20:04:55 -07:00

..

biz

case 4719 - report templates no longer hold the renderer's token or download key

2026-10-25 20:04:55 -07:00

ControllerHelpers

case 4725 - sessions end on password reset and login disabled, exact login route, default SuperUser limited when licensed

2026-10-24 19:54:03 -07:00

Controllers

case 4632 - reports render under IIS: the report page's API calls are relayed by the server

2026-10-25 19:04:24 -07:00

DataList

case 4690 - data-list date filters: >= and < from the start of the minute, != excludes the whole minute; null check first

2026-10-22 20:38:23 -07:00

generator

case 4632 - reports render under IIS: the report page's API calls are relayed by the server

2026-10-25 19:04:24 -07:00

kpi

case 4717 - KPI interval accepted only as a known date unit

2026-10-24 12:36:52 -07:00

models

case 4173

2023-05-08 22:54:18 +00:00

PickList

case 4712 - customer contacts' pick lists limited to their own records

2026-10-24 14:14:43 -07:00

resource

case 4597

2024-05-13 23:10:34 +00:00

util

case 4719 - report templates no longer hold the renderer's token or download key

2026-10-25 20:04:55 -07:00

appsettings.Development.json

…

appsettings.json

case 4690 - appsettings.json: Debug/Console log levels Trace -> Warning

2026-10-22 19:47:31 -07:00

AyaNova.csproj

case 4690 - remaining packages to current releases (Bogus, jose-jwt, QRCoder); Newtonsoft.Json direct reference

2026-10-22 19:47:31 -07:00

ayanova.ico

2021-12-02 23:23:10 +00:00

ConfigureSwaggerOptions.cs

case 4690 - Swashbuckle 10.3.1 / OpenAPI.NET 2: namespace and security requirement changes; drop explicit Microsoft.OpenApi

2026-10-22 16:46:49 -07:00

Program.cs

case 4724 - SMTP certificate checked, password never returned

2026-10-24 19:09:02 -07:00

Startup.cs

case 4632 - reports render under IIS: the report page's API calls are relayed by the server

2026-10-25 19:04:24 -07:00