- Add request tenant validation to all ViewSets (EventViewSet, ResourceViewSet, ParticipantViewSet, CustomerViewSet, StaffViewSet) to prevent cross-tenant data access via subdomain/header manipulation - Change permission_classes from AllowAny to IsAuthenticated for EventViewSet and ResourceViewSet - Filter events for customers to only show appointments where they are a participant - Add customer field to EventSerializer to create Customer participants when appointments are created - Update CustomerDashboard to fetch appointments from API instead of mock data - Fix TenantViewSet.destroy() to properly handle cross-schema cascade when deleting tenants 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
React + Vite
This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
Currently, two official plugins are available:
- @vitejs/plugin-react uses Babel (or oxc when used in rolldown-vite) for Fast Refresh
- @vitejs/plugin-react-swc uses SWC for Fast Refresh
React Compiler
The React Compiler is not enabled on this template because of its impact on dev & build performances. To add it, see this documentation.
Expanding the ESLint configuration
If you are developing a production application, we recommend using TypeScript with type-aware lint rules enabled. Check out the TS template for information on how to integrate TypeScript and typescript-eslint in your project.