Commit graph

67 commits

Author SHA1 Message Date
boojack
f497f009ce fix(webhook): fail loud on malformed signing secret and add tests
Follow-up to #6013. The signing path silently fell back to using the raw
secret string as the HMAC key when a whsec_-prefixed secret had invalid
base64, producing signatures no receiver could verify with no server-side
signal.

- Extract resolveSigningKey helper that errors on invalid whsec_ base64
- Post returns that error (logged by the async dispatcher); ValidateSigningSecret
  rejects it at write time so a bad secret is never stored
- Fix stale comment referencing a nonexistent Authorization header
- Add Go tests: key derivation, secret validation, end-to-end signature
  round-trip, and the invariant that the secret never leaks into API responses
2026-06-09 22:58:10 +08:00
Yiges.M.x.
063a44498d
feat: add optional webhook signing secret (Standard Webhooks HMAC-SHA256) (#6013) 2026-06-09 22:45:01 +08:00
boojack
a50ce09e81 fix(markdown): ignore tags inside links 2026-06-06 00:01:28 +08:00
goingforstudying-ctrl
e8d32e87d1
fix: support <meta name=description> in link previews (#6000)
Co-authored-by: goingforstudying-ctrl <goingforstudying-ctrl@users.noreply.github.com>
2026-06-02 23:02:21 +08:00
boojack
078488ca81 fix(httpgetter): prevent DNS rebinding in link metadata fetch 2026-05-08 23:24:16 +08:00
boojack
5ccba98adc
refactor: split STT and Audio-LLM into separate interfaces (#5928) 2026-05-03 00:21:58 +08:00
boojack
238f27dea1
feat(transcription): explicit STT settings with provider, model, prompt (#5926) 2026-05-02 19:35:18 +08:00
Steven
cd4f28ae10 feat(notification): add smtp email settings
- Add admin notification email settings UI and test-email RPC
- Dispatch privacy-first comment and mention emails through server notification layer
- Keep SMTP secrets write-only and require passwords when SMTP identity changes
2026-05-01 18:48:21 +08:00
boojack
9c5c604944 feat: add link metadata endpoints 2026-04-29 22:38:08 +08:00
boojack
94ce1e5347 chore(settings): show build commit in version info 2026-04-27 08:51:11 +08:00
boojack
ee1799851e
feat: redesign account and SSO management (#5886) 2026-04-24 09:08:58 +08:00
George Wu
bbded584ce
fix: user resource names can be uuidv4 from idp sub claim (#5856) 2026-04-19 13:05:08 +08:00
boojack
f8a304bae3 fix(release): inject build version into artifacts 2026-04-19 12:02:32 +08:00
boojack
c45663761d fix(api): reduce memory pressure in backend paths 2026-04-16 23:08:48 +08:00
boojack
a7fd1dacc9
refactor(ai): use official provider SDKs (#5845) 2026-04-16 22:27:57 +08:00
boojack
101704c8ea
feat(ai): add BYOK audio transcription (#5832) 2026-04-13 22:09:24 +08:00
boojack
0ad0fec8d4 feat(ai): add Anthropic provider option 2026-04-12 21:42:17 +08:00
memoclaw
d87539a1e1
feat: add Gemini transcription provider (#5830)
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-04-12 21:12:03 +08:00
memoclaw
83ed32f119
feat(ai): add instance AI providers and transcription (#5829)
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-04-12 19:23:34 +08:00
memoclaw
24fc8ab8ca
feat(mentions): add memo mention parsing, notifications, and rendering (#5811)
Co-authored-by: memoclaw <265580040+memoclaw@users.noreply.github.com>
2026-04-06 22:16:53 +08:00
boojack
10a955fd62 refactor: move plugin packages under internal 2026-04-06 11:10:32 +08:00
boojack
4b4e719470
feat(attachments): add Live Photo and Motion Photo support (#5810) 2026-04-06 10:47:01 +08:00
memoclaw
12e2205cb6
chore(backend): update Go toolchain and dependencies (#5730) 2026-03-16 21:07:52 +08:00
memoclaw
f0c4489468
chore: move storage setting migration to v0.27.0 (#5686)
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-05 19:44:36 +08:00
Steven
f43965de00 chore: bump version 2026-02-22 18:06:58 +08:00
Johnny
ba615172b0 chore: bump version 2026-02-08 21:28:11 +08:00
Steven
9cc970a3ea chore: fix data directory handling 2026-01-21 08:02:25 +08:00
Steven
4180613fc0 fix: update demo mode handling 2026-01-21 07:36:30 +08:00
Johnny
324f795965 fix: improve default data directory handling 2026-01-20 23:55:46 +08:00
Johnny
47ebb04dc3 refactor: remove mode flag and introduce explicit demo flag 2026-01-20 22:58:33 +08:00
Johnny
79f1edc9ba chore: bump version 2026-01-07 09:08:20 +08:00
Steven
e17cd163c6 chore: bump version 2025-11-25 22:17:45 +08:00
Steven
0c0d2a6294 chore: bump version 2025-10-24 08:15:32 +08:00
Steven
95de5cc700 refactor: update migration history methods 2025-10-20 23:05:50 +08:00
Steven
5ad2038b1a feat: update gomark dependency and refactor markdown parsing logic 2025-09-17 21:09:30 +08:00
Johnny
7cc2df9254 chore: fix linter 2025-08-31 20:22:32 +08:00
Steven
0d658088dc chore: bump version to 0.25.1 2025-08-18 20:21:30 +08:00
Steven
6e1b01cb68 chore: bump version 2025-06-24 23:06:57 +08:00
Johnny
1594c1ce3e chore: bump version 2025-06-02 09:39:57 +08:00
Steven
f1b365f928 refactor: clean packages 2025-05-29 21:44:43 +08:00
Steven
fdf9d9f506 chore: move resource name test 2025-03-17 21:41:21 +08:00
Johnny
9107a941ca chore: update linter config 2025-02-24 22:21:07 +08:00
Johnny
f98c519834 fix: linter 2025-02-24 22:04:25 +08:00
Steven
74498a726e chore: update package 2024-10-11 21:35:25 +08:00
Steven
cab981c393 chore: fix linter errors 2024-10-11 21:27:08 +08:00
Steven
3370ecd4fc chore: ignore lint for tests 2024-10-11 21:22:04 +08:00
Steven
0a871b8960 chore: fix tests 2024-10-11 21:13:36 +08:00
Steven
43d13a3edc chore: tweak linter 2024-10-11 21:05:07 +08:00
Steven
f467f1d9f6 chore: update cron package 2024-10-11 19:59:14 +08:00
Roman
310f147911
feat: allow single letter user id (#3991)
* Allow single letter user id.

They do work - I use one and login using Authelia, but then I am not able to update the profile to update avatar or add comment because "Invalid username: r" errors

* Add test for the util with uid matcher

* Move the test to separate directory

* Use goimports on the test file

* Rename the test for a mroe matching name, add failing test

* Update the regexp so that two letter work

---------

Co-authored-by: Roman Kamyk <roman@kamyk.me>
2024-10-08 13:47:24 +08:00