4 commits

Author	SHA1	Message	Date
Johan Lundberg	7bfea306ab	refactor: use shared ProfileUpdate validation in admin routes	2026-03-13 20:43:52 +01:00
Johan Lundberg	befcef9395	fix: add CSRF token handling to admin tests after merge ... The CSRF middleware added to main after the admin-pages branch was created caused all admin test POSTs/DELETEs to be rejected. Add get_csrf_token() calls and X-CSRF-Token headers to login helpers and all mutation requests, matching the pattern used by other tests.	2026-02-19 15:02:51 +01:00
Johan Lundberg	186be17b97	test: add comprehensive unit tests for admin routes	2026-02-19 14:17:41 +01:00
Johan Lundberg	dd1f85d8d3	feat: add admin router with admin group guard	2026-02-19 11:18:50 +01:00