Marc-André Bombeck d0ba4b061b feat(notifications): generate VAPID keys from the admin panel ...

Add a server-side VAPID keypair generator so a self-hoster no longer has
to run a shell command to enable Web Push. A new admin-only route
(POST /api/admin/settings/web-push-vapid/generate) calls web-push's
generateVAPIDKeys(), stores the private key encrypted at rest, seeds a
placeholder mailto: subject the operator can edit, and returns only the
public key. The route is cookie-only via requireAdmin(); a Bearer token
cannot reach it. The private key is never returned and never logged — the
audit detail carries a marker only.

The admin Web Push VAPID card gains a Generate keys button that fills the
public key and subject fields on success. When a keypair already exists
the route refuses with 409 and the card confirms before retrying with
force, warning that regenerating invalidates existing browser
subscriptions.

2026-06-15 00:58:30 +02:00

..

de.json

feat(notifications): generate VAPID keys from the admin panel

2026-06-15 00:58:30 +02:00

en.json

feat(notifications): generate VAPID keys from the admin panel

2026-06-15 00:58:30 +02:00

es.json

feat(notifications): generate VAPID keys from the admin panel

2026-06-15 00:58:30 +02:00

fr.json

feat(notifications): generate VAPID keys from the admin panel

2026-06-15 00:58:30 +02:00

it.json

feat(notifications): generate VAPID keys from the admin panel

2026-06-15 00:58:30 +02:00

pl.json

feat(notifications): generate VAPID keys from the admin panel

2026-06-15 00:58:30 +02:00