J3vb/OwnCord
1
0
Fork 0
mirror of https://github.com/J3vb/OwnCord.git synced 2026-09-03 03:50:00 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat: LiveKit migration — permissions, auth hardening, voice improvements

Browse Source 
Pre-review snapshot of LiveKit migration changes including:
- Permission computation fix (allow-wins semantics)
- Timing-safe password comparison with dummy hash
- Rate limiter window fix
- Dev credential clearing for LiveKit
- Voice leave/join broadcast improvements
- Migration transaction wrapping
- Chat edit/delete permission guards
- TOTP verification endpoint
- Embed regex injection fix
This commit is contained in:
jevb
2026-03-24 21:30:23 +01:00
parent 3f58345e6c
commit e0437d4d8d
27 changed files with 188 additions and 64 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Server/api/router.go
+1 -1
View File
@@ -47,7 +47,7 @@ func NewRouter(cfg *config.Config, database *db.DB, ver string, logBuf *admin.Ri
})
// Auth routes: register, login, logout, me.
MountAuthRoutes(r, database, limiter)
MountAuthRoutes(r, database, limiter, cfg.Server.TrustedProxies)
// Invite management routes (require MANAGE_INVITES permission).
MountInviteRoutes(r, database)