Jakub Zych 3a1dda45ec feat(15-03): enforce JOURNAL-005 draft 404 and backend-Bearer writes ...

- Show unpublished or future posts as 404 without a data key unless owner or access_other_posts
- POST/PUT/DELETE posts and featured-images require a backend-audience JWT and PHP {error} strings
- Anonymous GET categories and tags return the PHP list keys; frontend-audience tokens cannot write

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-10-06 18:59:12 +02:00

..

auth.go

feat(15-03): enforce JOURNAL-005 draft 404 and backend-Bearer writes

2026-10-06 18:59:12 +02:00

posts_helpers.go

feat(15-03): enforce JOURNAL-005 draft 404 and backend-Bearer writes

2026-10-06 18:59:12 +02:00

posts.go

feat(15-03): enforce JOURNAL-005 draft 404 and backend-Bearer writes

2026-10-06 18:59:12 +02:00