mirror of https://github.com/J3vb/OwnCord.git synced 2026-09-03 03:50:00 +03:00

T

jevb 4d1a1676c7 feat: TOFU cert pinning, settings cache refactor, ban enforcement, and 80%+ test coverage

- Implement TOFU certificate pinning in Rust WS proxy with accept_cert_fingerprint command
- Refactor settings cache from package-level globals to Hub methods (eliminates global state)
- Add runtime ban check on WS message handling (kicks banned users mid-session)
- Sanitize reaction error messages to prevent IDOR information leaks
- Add slog error logging to REST handlers (channel, invite, search)
- Handle channel_delete for active channel in client dispatcher
- Add certMismatchBlock to prevent auto-reconnect on TOFU mismatch
- Consolidate root-level spec docs into docs/brain/06-Specs/ vault
- Add 80%+ test coverage for ws (80.9%) and admin (81.7%) packages
- Delete completed TODOS.md (all items resolved)

2026-03-17 11:05:52 +01:00

.github

fix: address PR review findings (issues #3-#8)

2026-03-17 03:20:37 +01:00

Client

feat: TOFU cert pinning, settings cache refactor, ban enforcement, and 80%+ test coverage

2026-03-17 11:05:52 +01:00

docs/specs

feat: TOFU cert pinning, settings cache refactor, ban enforcement, and 80%+ test coverage

2026-03-17 11:05:52 +01:00

Server

feat: TOFU cert pinning, settings cache refactor, ban enforcement, and 80%+ test coverage

2026-03-17 11:05:52 +01:00

.gitignore

feat: TOFU cert pinning, settings cache refactor, ban enforcement, and 80%+ test coverage

2026-03-17 11:05:52 +01:00

README.md

chore: update .gitignore to exclude local tooling, build artifacts, and internal docs

2026-03-15 16:54:55 +01:00

README.md

OwnCord

Self-hosted Windows chat platform with voice, video, and an admin panel.

Features

Real-time text chat with threads and reactions
Voice and video channels (WebRTC)
Role-based permissions with custom roles
File sharing with inline previews
Full-text message search
Web-based admin panel
Invite-only registration
TLS encryption (self-signed or custom cert)

Quick Start

Download the latest release from GitHub Releases
Run chatserver.exe -- generates config.yaml on first run
Open https://localhost:8443/admin to access the admin panel
Generate an invite code, share it with friends
Friends download the client installer and connect using your server address

Building from Source

Server

cd Server
go build -o chatserver.exe -ldflags "-s -w -X main.version=1.0.0" .

Client (Tauri v2)

cd Client/tauri-client
npm install
npm run tauri build

The installer is output to Client/tauri-client/src-tauri/target/release/bundle/nsis/.

Architecture

OwnCord consists of a Go server and a Tauri v2 desktop client. The server handles all business logic, storage, and real-time communication. Clients connect over WebSocket for chat events, REST for history and uploads, and WebRTC for voice/video.

+---------------------+         +---------------------+
|   OwnCord Client    |         |   OwnCord Server    |
|   (Tauri v2)        |         |       (Go)          |
|                     |         |                     |
|  +---------------+  |  WSS    |  +---------------+  |
|  |  Chat UI      |--+------->|  |  WebSocket Hub|  |
|  +---------------+  |         |  +---------------+  |
|  +---------------+  |  HTTPS  |  +---------------+  |
|  |  REST Client  |--+------->|  |  REST API     |  |
|  +---------------+  |         |  +---------------+  |
|  +---------------+  |  WebRTC |  +---------------+  |
|  |  Voice/Video  |--+------->|  |  TURN/STUN    |  |
|  +---------------+  |         |  +---------------+  |
+---------------------+         |  +---------------+  |
                                |  |  SQLite DB    |  |
                                |  +---------------+  |
                                +---------------------+

Documentation

License

MIT