Sicherhaven fb1abc0b99 fix(top-events): remove token gate, add event_status filter and event_type_name ...

TopEventsAPI had AllowAny permission but still called
validate_token_and_get_user(), blocking unauthenticated carousel fetches.
Also added event_status='published' filter and event_type_name resolution
(model_to_dict only returns the FK integer, not the string name).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-06 22:16:41 +05:30

..

forms

feat(accounts): home district with 6-month cooldown

2026-04-04 10:42:44 +05:30

migrations

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

views

fix(top-events): remove token gate, add event_status filter and event_type_name

2026-04-06 22:16:41 +05:30

__init__.py

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

admin.py

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

apps.py

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

models.py

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

tests.py

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

urls.py

feat(ad_control): new AdSurface + AdPlacement module for placement-based featured/top events

2026-04-06 12:10:06 +05:30

utils.py

security: fix SMTP credential exposure and auth bypass

2026-03-30 19:29:42 +00:00