edavis.dev / happyview
A lexicon-driven AppView for ATProto.
Star
Fork 0
Watch

Commits on dev

fix: verify CIDs
Signed-off-by: Trezy <tre@trezy.com>
v2.11.4 dev
Trezy committed
test: add migrator verification
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: remove user drop from e2e setup
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
docs: add docs for the new Github Actions
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: escape metacharacters in `find_blob_author_did`
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: revert to root user in Dockerfile
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge branch 'fix/critical-security' v2.11.3
Trezy committed
fix: move drop to app user after setup
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: secret comparisons now use constant time
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge pull request #74 from gamesgamesgamesgamesgames/fix/critical-security v2.11.2
Trezy committed
ci: prevent disk from filling during e2e tests
Signed-off-by: Trezy <tre@trezy.com>
fix/critical-security
Trezy committed
chore: update _so many_ deps
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: update deps
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
ci: run e2e as root in CI
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: revoke member credentials before removing them from a space
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: Run Docker image as non-root user
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: add replay protection to dpop proofs
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: better handling for empty TOKEN_ENCRYPTION_KEY
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent error details from leaking to external users
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
docs: capture security concerns with record signing
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent lockouts from failed super admin transfer
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: issue space credentials for `iss`, not for the caller
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: implement revocation for space credentials
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent `listRepos` from leaking space participant lists
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge pull request #73 from gamesgamesgamesgamesgames/fix/critical-security v2.11.1
Trezy committed
fix: require auth on space notification endpoints
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: validate JWT aud in middleware
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: ensure superadmin-created admin API keys respect scopes
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent victim record overwrite
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent `read_self` from escalating during access merge
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent db.raw access to sensitive tables
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent use of default session secret
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent CORS from reflecting credentials to arbitrary origins
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
fix: prevent identity spoofing via /oauth/sessions
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
docs: fix docs and blog on mobile
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
docs: fix blob method typo
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
docs: add 2.11 release article
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge pull request #70 from gamesgamesgamesgamesgames/dev v2.11.0
Trezy committed
Merge branch 'main' into dev
Trezy committed
docs: add Witchsky platform to post comments
Signed-off-by: xan <xan@xan.lol>
xan committed
fix: add better validation to spaces impl
Signed-off-by: Trezy <tre@trezy.com>
v2.11.0-dev.2
Trezy committed
docs: update spaces docs to new `at://` syntax
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
feat: align with final permissioned spaces proposal
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge remote-tracking branch 'origin/main' into dev
Signed-off-by: Trezy <tre@trezy.com>
github-actions[bot] committed
docs: restore sequoia publishing
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge remote-tracking branch 'origin/main' into dev
Signed-off-by: Trezy <tre@trezy.com>
github-actions[bot] committed
docs: add custom renderer for comments
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
docs: reduce login scopes
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge remote-tracking branch 'origin/main' into dev
Signed-off-by: Trezy <tre@trezy.com>
github-actions[bot] committed
docs: add login, subscribe, and recommend
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge remote-tracking branch 'origin/main' into dev
Signed-off-by: Trezy <tre@trezy.com>
github-actions[bot] committed
docs: add comments to articles
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge remote-tracking branch 'origin/main' into dev
Signed-off-by: Trezy <tre@trezy.com>
github-actions[bot] committed
docs: fix article release date
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge remote-tracking branch 'origin/main' into dev
Signed-off-by: Trezy <tre@trezy.com>
github-actions[bot] committed
docs: new article
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge pull request #67 from gamesgamesgamesgamesgames/feat/jobs
Signed-off-by: Trezy <tre@trezy.com>
v2.11.0-dev.1
Trezy committed
fix: fix Playwright tests
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed
Merge remote-tracking branch 'origin/main' into dev
Signed-off-by: Trezy <tre@trezy.com>
github-actions[bot] committed
docs: add jobs docs
Signed-off-by: Trezy <tre@trezy.com>
Trezy committed