damir/pgz-sport
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
24 Commits 1 Branch 0 Tags
f5c6570d47e21bbd4766d03cf7562d7304f5560e
T
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Damir Radulić f5c6570d47 CC2 R4 #2+#5: remove legacy unauth /api/admin/users — close 401 gap 
The bare @app.get/post('/api/admin/users') decorators in pgz_sport_api.py
were registered before app.include_router(admin_users_router) and shadowed
the JWT-protected M2 routes, leaking user list to anyone.

Removed all three: GET /api/admin/users, POST /api/admin/users,
POST /api/admin/users/{uid}/toggle. The auth.admin_users router now owns
this prefix exclusively and gates every method with require_user.

Verified: no-auth → 401, invalid token → 401, valid Bearer → 200.
2026-05-05 00:44:50 +02:00
_backups
CC2 R4 #2+#5: remove legacy unauth /api/admin/users — close 401 gap
2026-05-05 00:44:50 +02:00
_corpus
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
_data
CC2 R4 #2+#5: remove legacy unauth /api/admin/users — close 401 gap
2026-05-05 00:44:50 +02:00
_design_master
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
_downloads
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
_handoff
M1+M2+M10 (CC2 R3): JWT auth + admin users + GDPR backend
2026-05-05 00:09:09 +02:00
auth
CC3 R3 M4+: avatar upload, PUT /api/auth/me, /uploads mount
2026-05-05 00:44:14 +02:00
blockchain
CC2 R3 frontend: login.html + admin_users.html (M1+M2+M10 UI)
2026-05-05 00:20:03 +02:00
crm
M7 CRM Članarine: CRUD + dug + uplata + HUB-3 PDF + EPC QR
2026-05-04 23:54:26 +02:00
data
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
enrichment
M12.3: Playwright fallback scraper for JS-heavy federation sites
2026-05-05 00:23:00 +02:00
erp
CC2 R4 #2+#5: remove legacy unauth /api/admin/users — close 401 gap
2026-05-05 00:44:50 +02:00
routers
CC2 R4 #2+#5: remove legacy unauth /api/admin/users — close 401 gap
2026-05-05 00:44:50 +02:00
scrapers
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
scripts
CC1 R3B-P3 — geocoding precision (Crikvenica + OSM cross-check)
2026-05-05 00:04:50 +02:00
static
CC2 R4 #2+#5: remove legacy unauth /api/admin/users — close 401 gap
2026-05-05 00:44:50 +02:00
uploads/avatars
CC2 R4 #2+#5: remove legacy unauth /api/admin/users — close 401 gap
2026-05-05 00:44:50 +02:00
workers
CC2 R4 #2+#5: remove legacy unauth /api/admin/users — close 401 gap
2026-05-05 00:44:50 +02:00
.env.pre_b_switch.1777891945
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
.gitignore
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
admin_router.py
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
CLAUDE.md
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
fin_import.py
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
fin_import.py.pre_b_switch.1777892956
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
godisnjak_embed.py
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
HANDOFF_PGZ_SPORT_CC.md
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
learn_loop.py
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
learn_loop.py.dsn.1777924288
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
learn_loop.py.dsn.1777924328
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
pgz_sport_api.py
CC2 R4 #2+#5: remove legacy unauth /api/admin/users — close 401 gap
2026-05-05 00:44:50 +02:00
pgz_sport_api.py.dsn.1777924264
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
pgz_sport_api.py.pre_b_switch.1777891945
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
pgz_sport_v2_router.py
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
pgz_sport_v2_router.py.dsn.1777924288
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
pgz_sport_v2_router.py.dsn.1777924328
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
pgz_sport_v2_router.py.pre_b_switch.1777891945
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
pgz_sport_v2_router.py.qdrant_bak.1777910643
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
rno_import.py
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
rno_import.py.pre_b_switch.1777892956
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
scrape_online.py
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
scrape_online.py.pre_b_switch.1777892956
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
scrape_online.py.tg_replace.1777923681
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
scrape_sports_tables.py
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
scrape_sports_tables.py.pre_b_switch.1777892956
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
sport_doc_embedder.py
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
sport_facts_ingest.py
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
sport_facts_ingest.py.pre_b_switch.1777892956
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
sport_knowledge_sync.py
PGŽ Sport Platform — Round 1+2 baseline (sport2.html + API)
2026-05-04 23:39:08 +02:00
swarm.sh
M1+M2+M10 (CC2 R3): JWT auth + admin users + GDPR backend
2026-05-05 00:09:09 +02:00
S
Description
PGZ Sport Intelligence Platform
3 GiB
Languages
HTML 89.3%
Python 9.5%
Stata 0.8%
Ruby 0.2%