Sicherhaven 8ae97dcdc7 fix(featured-events): remove token gate from FeaturedEventsAPI ...

FeaturedEventsAPI had AllowAny permission but still called
validate_token_and_get_user(), causing it to return a token-required
error for unauthenticated requests from the desktop hero slider.

Removed the token check entirely — the endpoint is public by design.
Also tightened the queryset to event_status='published' to match
ConsumerFeaturedEventsView behaviour.

2026-04-06 19:41:25 +05:30

..

forms

feat(accounts): home district with 6-month cooldown

2026-04-04 10:42:44 +05:30

migrations

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

views

fix(featured-events): remove token gate from FeaturedEventsAPI

2026-04-06 19:41:25 +05:30

__init__.py

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

admin.py

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

apps.py

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

models.py

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

tests.py

Reverting back to admin pages as login and updates in the mobile api

2025-12-17 22:05:13 +05:30

urls.py

feat(ad_control): new AdSurface + AdPlacement module for placement-based featured/top events

2026-04-06 12:10:06 +05:30

utils.py

security: fix SMTP credential exposure and auth bypass

2026-03-30 19:29:42 +00:00