11 Commits

Author	SHA1	Message	Date
Baptiste Arnaud	36a6186101	🐛 Fix WhatsApp preview webhook authorization (#2499) ... - Validate that WhatsApp preview webhook test sessions belong to the authorized typebot before resuming them. - Require the preview session to still be waiting on the requested webhook block. - Share WhatsApp preview phone normalization between preview creation and test webhook execution.	2026-05-21 17:01:12 +02:00
Baptiste Arnaud	6f915c3096	🐛 Prevent cross-typebot webhook resume IDOR (#2494) ... - Scope `result` lookup in `handleExecuteWebhook` to the authorized `typebotId`, closing a cross-tenant IDOR where a caller with read access to one typebot could resume another typebot's waiting webhook session by supplying a foreign `resultId`.	2026-05-19 18:45:19 +02:00
Baptiste Arnaud	acd2f2971b	🔧 Remove "baseUrl": "." from tsconfigs	2026-03-25 16:40:12 +01:00
Baptiste Arnaud	9cf506c5d1	🔧 Add feature-flags service	2026-03-20 17:58:25 +01:00
Baptiste Arnaud	a9b2af116d	🐛 Fix code scanning findings	2026-03-19 10:21:03 +01:00
Baptiste Arnaud	c2b251c7e5	♻️ Migrate to NX (#2418)	2026-03-18 15:29:32 +00:00
Baptiste Arnaud	5e0de89911	🔧 Add forward WA errors and campaign statuses option	2026-02-11 16:46:35 +01:00
Baptiste Arnaud	80db9565cd	♻️ Upgrade to Zod v4 (#2355)	2026-01-19 10:51:20 +01:00
Baptiste Arnaud	a15673f5a6	♻️ Migrate builder from tRPC to oRPC (#2342)	2026-01-13 15:10:07 +01:00
Baptiste Arnaud	61b4987b78	🐛 Fix webhook listening not working	2026-01-09 14:54:34 +01:00
Baptiste Arnaud	3d649886c2	♻️ Refacto viewer server handler to oRPC	2025-12-17 18:00:20 +01:00