2 Commits

Include renames

Author	SHA1	Message	Date
J3vb	3d18ce4f99	fix: Go E2EE security hardening — key holder tracking, base64 loose validation, rate limits, test schema ... - I-1: Add key holder election in Hub (lowest userID per channel); reject non-key-holder voice_e2ee_offer with NOT_KEY_HOLDER error - I-2: Accept raw (unpadded) base64 in E2EE announce/offer handlers via decodeBase64Loose fallback - I-6: Copy E2EE public key value while h.mu.RLock is held in getClientE2EEPubKey - I-7: Lower loginRateLimitPerMinute from 60 to 5 - C-1: TOCTOU fix — target channel check held under same lock as client lookup - C-2: Include is_key_holder bool in voice_token payload so client knows whether to initiate key distribution - M-5/M-6: Add ErrCodeBadPayload/ErrCodeNotKeyHolder error constants - Fix pre-existing api build errors: block_handler.go getUserFromContext, router.go RequirePermission arg count - Add user_blocks table to all test DB schemas (ws, api DM) - Add voice_e2ee_test.go and constants_test.go covering all fixes	2026-04-04 23:16:31 +02:00
jevb	3236918012	refactor: server hardening + client decomposition + protocol resilience ... Server: - Split monolithic voice_handlers.go into voice_join/leave/controls/broadcast - Add metrics endpoint (admin-IP-restricted /api/v1/metrics) - Add orphaned attachment cleanup in maintenance loop - Add sentinel errors (db/errors.go, ws/errors.go) - Add ring buffer for event replay on reconnect - Add heartbeat monitoring with stale connection sweep - Improve hub with panic recovery, graceful shutdown, seq tracking - Typed message structs replace raw map[string]interface{} Client: - Decompose MainPage into ChatArea + SidebarArea controllers - Add disposable.ts lifecycle management pattern - Add member list right-click context menu (kick/ban/role) - Tighten CSP (media-src, font-src, object-src, base-uri) - Improve store with shallowEqual, 500-msg cap, batch updates - Add search API endpoint wiring - Fix LiveKit session cleanup and reconnection Docs: - Add CODEMAPS for architecture, backend, frontend, data, deps - Add protocol-schema.json (machine-readable, 36 message types) - Add platform research report - Update PROTOCOL.md with seq/replay fields	2026-03-21 10:08:44 +01:00