Fix crash bugs and secure webhook/TMDB key

- Add missing MovieController::remove/markWatched (routes called undefined methods)
- Fix linkPartner(): commit() was unreachable after an early return, so partner
  linking was never actually persisted in the DB
- Add missing removeMovie/markWatched functions in app.js
- webhook.php now verifies a GitHub HMAC signature before running git reset --hard
- Move TMDB API key server-side via a new TmdbController proxy (tmdb-search/tmdb-details)
  instead of exposing it in client-side JS

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

This commit is contained in:

Noah CIBOT NOËL

2026-07-12 16:50:35 +02:00

parent 7207e8afb7

commit 4c61b7f276

7 changed files with 126 additions and 7 deletions

.gitignore

+2 -1

View File

@@ -1 +1,2 @@
 config/database.php
 config/database.php
 webhook.log