isaacclad/ladill-link
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
63 Commits 1 Branch 0 Tags
0a63f3a07377cf23a84420036415bc71c4cf8c3f
Commit Graph
5 Commits
Author SHA1 Message Date
isaacclad 76878ac5a4 Fix proxied checkout CSRF for Merchant, Give, Invoice and Events.
Deploy Ladill Link / deploy (push) Successful in 1m41s
Details 
Public order/pay POSTs hit ladl.link first; satellite CSRF tokens cannot bind
to Link (or platform/satellite) sessions, which returned 419 and showed
"Could not start checkout." Except public checkout paths and return
access_code from owner-gateway Paystack init. Sync contained Paystack sheet.
 2026-07-21 22:53:43 +00:00
isaaccladandCursor 520284d766 Exempt Mini Pay POSTs from Link CSRF checks.
Deploy Ladill Link / deploy (push) Successful in 1m4s
Details 
Proxied ladl.link/{slug}/pay requests carry CSRF tokens from Mini HTML, which cannot bind to Link's session — the same 419 failure mode as event registration.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-13 23:11:59 +00:00
isaaccladandCursor 344bf76391 Add GeoIP country fallback for link click analytics.
Deploy Ladill Link / deploy (push) Successful in 39s
Details 
Resolve countries from CDN headers first, then MaxMind GeoLite2 via visitor IP, with an artisan command to download and refresh the database.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-04 23:36:01 +00:00
isaaccladandCursor ac7bef1e24 Exempt public event registration POST from ladill-link CSRF checks.
Deploy Ladill Link / deploy (push) Successful in 46s
Details 
Registration forms post to ladl.link first; Events-issued CSRF tokens cannot
validate against the Link app session and caused token mismatch errors.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-03 14:18:33 +00:00
isaacclad 04e4f6ab51 Bootstrap Ladill Link from QR Plus extract template. 2026-06-27 10:54:31 +00:00