Block a user
Fix auth.py: anti-forgery token JSON parsing + missing CSRF header + FormsAuthReturnUrl
v3 admin separation — admin API + frontend extracted
v3 admin separation — admin API + frontend extracted
Server-side EXIF GPS extraction
Server-side EXIF GPS extraction
Frontend: use server-returned EXIF GPS in upload flow
Frontend: use server-returned EXIF GPS in upload flow
T2: Strip admin API routes from main server.py
T2: Strip admin API routes from main server.py