jevb 2976863ad0 fix: atomic invite registration, fail-closed search, proxy-aware rate limiting ...

- Atomic CreateUserWithInvite prevents invite burn on failed registration
- Channel search fails closed on channel-type and override lookup errors
- Malformed FTS input returns 400 instead of 500
- Search rate limiting uses own namespace, respects trusted proxy IPs
- Login lockout keyed by forwarded client IP behind reverse proxy
- Trusted same-server OG previews re-enabled with self-signed cert support
- Normalized host matching for embeds/attachments
- Regression tests for all changes (auth, channel, embeds)

2026-03-29 19:39:22 +02:00

..

auth.go

feat: implement Phase 1 server skeleton with TDD

2026-03-14 20:34:37 +01:00

helpers_test.go

feat: add Let's Encrypt ACME support, fix security issues, improve server UX

2026-03-15 07:07:59 +01:00

helpers.go

fix: atomic invite registration, fail-closed search, proxy-aware rate limiting

2026-03-29 19:39:22 +02:00

password_test.go

feat: implement Phase 2 auth & security with TDD

2026-03-14 20:52:11 +01:00

password.go

fix: address code review — 8 issues across server and client

2026-03-24 21:35:40 +01:00

ratelimit_cleanup_test.go

feat: add Let's Encrypt ACME support, fix security issues, improve server UX

2026-03-15 07:07:59 +01:00

ratelimit_test.go

fix: address PR review findings (issues #9-#14)

2026-03-17 04:11:04 +01:00

ratelimit.go

feat: LiveKit migration — permissions, auth hardening, voice improvements

2026-03-24 21:30:23 +01:00

session_test.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00

session.go

feat: implement Phase 2 auth & security with TDD

2026-03-14 20:52:11 +01:00

tls_test.go

feat: add Let's Encrypt ACME support, fix security issues, improve server UX

2026-03-15 07:07:59 +01:00

tls.go

fix: resolve all golangci-lint issues blocking CI server build

2026-03-17 08:09:52 +01:00