jevb 57d87bb439 fix: require auth + channel ACL on file serving (BUG-092) ...

Private attachments were accessible without authentication if the UUID
was known. Added AuthMiddleware to the GET /api/v1/files/{id} route,
uploader_id tracking on uploads, and channel-level permission checks
(guild READ_MESSAGES, DM participant, admin bypass) in handleServeFile.

Migration 010 adds uploader_id column to attachments table.
8 new access-control tests covering all authorization paths.

2026-04-02 11:16:16 +02:00

..

account_test.go

test: add server core test coverage (Session 1)

2026-04-01 08:41:09 +02:00

account.go

fix: resolve 24 critical and high issues from full code & security review

2026-04-01 09:23:17 +02:00

admin_queries_test.go

test: boost server test coverage to 80%+ across all packages

2026-03-18 05:03:38 +01:00

admin_queries.go

fix: resolve 24 critical and high issues from full code & security review

2026-04-01 09:23:17 +02:00

attachment_queries_test.go

fix: resolve 1 critical and 5 high security/reliability issues from go-review

2026-03-19 03:53:40 +01:00

attachment_queries.go

fix: require auth + channel ACL on file serving (BUG-092)

2026-04-02 11:16:16 +02:00

auth_queries_test.go

test: boost server test coverage to 80%+ across all packages

2026-03-18 05:03:38 +01:00

auth_queries.go

fix: close 3 security audit findings (BUG-108, BUG-122, BUG-126)

2026-04-02 10:37:34 +02:00

backup_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

channel_queries_test.go

test: boost server test coverage to 80%+ across all packages

2026-03-18 05:03:38 +01:00

channel_queries.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

coverage_boost_test.go

fix: require auth + channel ACL on file serving (BUG-092)

2026-04-02 11:16:16 +02:00

db_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

db.go

refactor: context propagation, LogAudit deadlock fix, ESLint v9, code quality

2026-03-29 19:39:46 +02:00

dm_queries_test.go

feat: comprehensive spec docs, test suite, E2E overhaul, and security hardening

2026-03-28 10:39:23 +01:00

dm_queries.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

errors_test.go

test: add server core test coverage (Session 1)

2026-04-01 08:41:09 +02:00

errors.go

fix: atomic invite registration, fail-closed search, proxy-aware rate limiting

2026-03-29 19:39:22 +02:00

invite_queries.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

message_queries_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

message_queries.go

fix: resolve 4 server bugs (Phase 1: BUG-085, BUG-087, BUG-090, BUG-091)

2026-04-01 17:52:06 +02:00

migrate_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

migrate.go

fix: handle BEGIN...END blocks in SQL migration splitter

2026-04-01 15:35:50 +02:00

models_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

models.go

feat: LiveKit video grid improvements, voice state cleanup, and internal tooling

2026-03-31 11:41:59 +02:00

profile_queries_test.go

feat: add user profile management endpoints (T-195)

2026-04-01 11:37:55 +02:00

profile_queries.go

feat: add user profile management endpoints (T-195)

2026-04-01 11:37:55 +02:00

role_invite_queries_test.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

role_queries.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

sanitize_test.go

fix: resolve 4 server bugs (Phase 1: BUG-085, BUG-087, BUG-090, BUG-091)

2026-04-01 17:52:06 +02:00

voice_queries_test.go

feat: LiveKit video grid improvements, voice state cleanup, and internal tooling

2026-03-31 11:41:59 +02:00

voice_queries.go

fix: resolve 24 critical and high issues from full code & security review

2026-04-01 09:23:17 +02:00