Clamp /code pagination so a negative page no longer 500s.

Fixes DANDELION-3Q

Revert "move skills from project to user"

This reverts commit b19fca70c1b5ff261dcbbca7e0919895f18a0375.

Sign out in test helpers so account switches still work after magic-link session locking.

Reject GET password callbacks and stop magic links from swapping sessions.

Use amount + currency code again in admin contribution emails.

Symbol formatting like £3 is harder to scan in admin subjects than 3 GBP.

Prevent Mailgun recipient tokens from leaking through user-controlled email HTML.

Stop an abandoned OmniAuth session from attaching to a later signup.

Discover injected wallets via EIP-6963 and accept CRLF SIWE form posts.

Modern wallets may never set window.ethereum, and browsers submit the signed message with Windows newlines that siwe-rb rejects.

Merge pull request #234 from symbiota-coop/cursor/siwe-sign-in-c7b0

Replace omniauth-ethereum with Sign-In with Ethereum (EIP-4361) via siwe-rb

Refresh carousel IDs in place so a failed rebuild cannot wipe live membership.

Store carousel membership on events instead of a per-carousel cache.

Listings and carousel queries can filter on event.carousel_ids, rebuilt hourly, without looking up another organisation's carousel.

Treat carousel-filtered listings like search when blocking scrapers.

Drop the leftover carousel_id alias so the public events listing only accepts carousel_ids, matching the filter Rack::Attack now challenges.

Add rack tests for the Sign-In with Ethereum flow

Covers the request-phase message, sign-in for a linked wallet (case-insensitive uid match), signup for an unknown wallet, and rejection of replayed signatures, GET callbacks, forged nonce/domain, and signatures from another wallet. Keys are generated and signed with OpenSSL so no eth gem is needed.

Co-authored-by: stephen

Replace omniauth-ethereum with an EIP-4361 Sign-In with Ethereum strategy built on siwe-rb

The q9f/omniauth-ethereum strategy verified only that a wallet had signed 'Sign in with Ethereum

Move payment provider name from the event view onto Order.

Move event access tests into their own file.

Keep events_test focused on create/edit, slugs, and reminders, and put manager, cohost, and revenue permission cases in event_permissions_test.

Drop tests that only restate coverage already in a broader case.

Fold waitlist subscription checks into the join test, and remove MCP/order/ticket/webhook cases that duplicate a parent assertion.

Purge soft-deleted rows between tests

Don't let nested ticket type/group attributes move records to another event

Don't let optionships, teamships or shifts adopt their parent from a child.

Gathering and rota must be set by the caller, matching spends and inventory items, so a missing parent cannot skip the same-parent check.