Commit Graph
25 Commits
Author SHA1 Message Date
Hampus 8dc2bad843 perf(auth): cache auth session lookups by token hash (#2225) 2026-08-31 01:04:51 +02:00
Hampus c4b1471923 perf(api): cache channel and guild reads for the request (#2220) 2026-08-31 00:22:52 +02:00
Hampus 6fd3177844 fix(auth): time-bound outbound fetches and re-key pwned cache (#2183) 2026-08-30 23:16:44 +02:00
Hampus e83a2d6aec perf(user): stop double-writing last active on every request (#2148) 2026-08-30 23:04:59 +02:00
Hampus 723f0d6e6e perf(logger): stop building a throwaway pino root per child (#2132) 2026-08-30 22:15:40 +02:00
Hampus d297dc5805 feat(api): exempt APP_STORE_REVIEWER accounts from captcha (#2090) 2026-08-29 18:00:52 +02:00
Hampus 38297c4fe7 chore(api): drop knip-unused search and SSO exports (#2077) 2026-08-29 15:00:09 +02:00
Hampus bbd93df239 fix(api): expire auth tokens and harden login checks (#2073) 2026-08-29 14:55:04 +02:00
Hampus 5474be3efa fix(api): close auth, billing and authorization bypasses (#2065) 2026-08-29 02:59:38 +02:00
Hampus cf1a7d7a8a fix(api): mask Tor blocks as administrator IP bans (#2023) 2026-08-26 16:07:19 +02:00
Hampus c226eb7211 perf(repo): parallelise api tests and cache image builds in ghcr (#1984) 2026-08-24 21:24:39 +02:00
Hampus 9b0b703c9d fix(api): identify session clients correctly and attribute handoff sessions (#1727) 2026-08-19 00:41:29 +02:00
Hampus d7b2e67c35 feat(api): defer registration phone verification to community joins (#1709) 2026-08-18 05:13:41 +02:00
Hampus 6c68202222 fix(api): let SSO accounts without a password satisfy sudo verification (#1690) 2026-08-16 23:35:47 +02:00
Hampus 578fd61d93 feat(self-hosting): allow opting in to private-address SSO providers (#1655) 2026-08-15 22:30:46 +02:00
Hampus 235399cfd6 fix(api): keep activity tracking out of the registration critical path (#1629) 2026-08-15 15:08:48 +02:00
Hampus ec1182d34d feat(api): remove Flutter client auth gates (#1513) 2026-07-31 17:36:15 +02:00
Mocha b323701774 fix(sso): trust absent email_verified claim and relax auth code length limit (#1493) 2026-07-27 01:51:42 +02:00
6fd7c027e3 feat: Toggle to "Disable new IP Login authorization" emails in /admin (#1030)
Co-authored-by: Jiralite <[email protected]>
Co-authored-by: Hampus <[email protected]>
2026-07-01 20:38:59 +02:00
Jason ZherdevandJiralite 4a518b8e68 fix: SSO Issuer URL formatted incorrectly (#1096)
Co-authored-by: Jiralite <[email protected]>
2026-07-01 17:40:00 +01:00
Jiralite d5cc48a92d fix: remove Flutter captcha bypass (#1234) 2026-06-30 23:35:36 +02:00
Sven Uhrenholdt FrenzelandHampus a45693f581 feat: use client-provided SSO redirectUri (#1155)
Co-authored-by: Hampus <[email protected]>
2026-06-24 02:15:51 +02:00
Jiralite 545814abc1 ci: add tests (#1141) 2026-06-23 04:41:46 +02:00
Jiralite 68a89ec44c fix(FlutterClientGate): allow iOS users to use Flutter via self-hosting (#1125) 2026-06-22 01:37:49 +02:00
Hampus Kraft fa3e852575 workspace: reconcile latest Fluxer into the open source release and continue development there 2026-06-16 06:41:37 +02:00