J3vbandClaude Opus 5 77121adcaa fix(ws): revoke channel-topic subscriptions on role change (F1) ...

READ_MESSAGES was authorized once at channel_focus and then frozen into a
durable pub/sub subscription that no role change re-evaluated, so a demoted
user kept receiving every message posted in channels their new role can no
longer read. BroadcastMemberUpdate now recomputes the allowed set from the
user's current role and unsubscribes each held channel topic it no longer
covers, evicting the socket if visibility cannot be resolved.

Verified by a panel of agents; both added tests were confirmed failing
against the unpatched tree.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-07-30 14:58:35 +02:00

..

authz_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

can_send_ready_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

can_send_test.go

feat(client): optimistic message send + composer permission gating

2026-07-19 17:47:39 +00:00

channel_visibility_agreement_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

client.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

command_test.go

refactor: migrate WS handlers to V2 Command/Event architecture

2026-04-05 19:03:22 +02:00

command.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

coverage_boost2_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

coverage_boost_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

deps.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

dm_handlers_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

emit_test.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

emit.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

errors.go

fix: Go E2EE security hardening — key holder tracking, base64 loose validation, rate limits, test schema

2026-04-04 23:16:31 +02:00

event_persister_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

event_persister.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

event_pruner_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

event_pruner.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

event_test.go

chore(server): delete production-dead code; move test helpers to export_test

2026-07-23 15:28:41 +02:00

event.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

eventstore.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

export_test.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

extract_event_type_test.go

test+feat(phase-bc): pass 4 — test coverage, install endpoint, CHANGELOG

2026-04-06 10:30:18 +00:00

handler_v2_channel_focus_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handler_v2_migration_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

handler_v2_ping_test.go

refactor: migrate WS handlers to V2 Command/Event architecture

2026-04-05 19:03:22 +02:00

handler_v2_voice_e2ee_offer_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

handler_v2_voice_e2ee_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

handler_v2_voice_token_test.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

handlers_chat.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_command_test.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

handlers_command.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_ping.go

refactor: migrate WS handlers to V2 Command/Event architecture

2026-04-05 19:03:22 +02:00

handlers_presence.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_reaction.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

handlers_voice.go

feat(ws): finish the V2 dispatch migration and delete V1

2026-07-20 11:41:58 +02:00

handlers.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

hub_broadcast_test.go

test: close measured test-coverage gaps across server, client and Rust

2026-07-25 14:47:21 +00:00

hub_seedseq_test.go

test+feat(phase-bc): pass 4 — test coverage, install endpoint, CHANGELOG

2026-04-06 10:30:18 +00:00

hub_test.go

fix(ws): revoke channel-topic subscriptions on role change (F1)

2026-07-30 14:58:35 +02:00

hub.go

fix(ws): revoke channel-topic subscriptions on role change (F1)

2026-07-30 14:58:35 +02:00

livekit_client_test.go

test: close measured test-coverage gaps across server, client and Rust

2026-07-25 14:47:21 +00:00

livekit_process.go

fix(server): regenerate empty livekit.yaml instead of treating it as user-managed

2026-07-19 11:20:14 +00:00

livekit_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

livekit_webhook_joined_test.go

test: close measured test-coverage gaps across server, client and Rust

2026-07-25 14:47:21 +00:00

livekit_webhook.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

livekit.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

message_types.go

feat(server,client): protocol codegen + audit quick-wins batch

2026-07-19 13:32:58 +00:00

messages_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

messages.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

origin_test.go

fix: resolve 24 critical and high issues from full code & security review

2026-04-01 09:23:17 +02:00

origin.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

pubsub_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

pubsub.go

fix(ws): revoke channel-topic subscriptions on role change (F1)

2026-07-30 14:58:35 +02:00

reconnect_db_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

registry_test.go

feat(ws): finish the V2 dispatch migration and delete V1

2026-07-20 11:41:58 +02:00

registry.go

feat(server): logging & error-visibility hardening

2026-07-24 11:07:12 +02:00

ringbuffer_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

ringbuffer.go

fix: encrypt TOTP secrets at rest and filter replay buffer by permissions

2026-04-02 15:05:56 +02:00

serve_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

serve.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

topic_rate_limiter_test.go

fix: resolve golangci-lint failures and correct audit-doc inaccuracies

2026-07-28 12:25:10 +00:00

topic_rate_limiter.go

migrate upload/profile handlers, add topic rate limiter, wire voice topics

2026-04-05 21:34:32 +00:00

voice_broadcast.go

chore(server): delete production-dead code; move test helpers to export_test

2026-07-23 15:28:41 +02:00

voice_controls.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

voice_e2ee_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00

voice_e2ee.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

voice_handlers_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

voice_join.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

voice_leave.go

fix(security): close all 13 findings from the 2026-07-28 server scan, plus dependabot rollup (#1264)

2026-07-29 12:48:47 +02:00

voice_perm_stale_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

ws_integration_test.go

feat(auth): revocable API tokens, introspect MCP server, and a Go 1.26 idiom pass (#1266)

2026-07-29 13:25:46 +02:00