Edouard Vanbelle 16c5e06e2b security(/magic): no cache + no referer + no index

2026-06-03 16:19:03 +02:00

..

admin_handler.rs

feat(external users): email sanity + mock SMTP

2026-06-03 00:31:59 +02:00

app_password_handler.rs

feat(passwordless): pass4: add env variable to enable mgaiclink on account with password

2026-06-03 00:35:25 +02:00

auth_handler.rs

feat(user.prefered_locale): save user's locale + invited have same locale as inviters

2026-06-03 14:37:22 +02:00

batch_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

caldav_handler.rs

fix(dav): handle username prefix in all CalDAV and CardDAV route handlers

2026-04-30 14:14:14 +02:00

carddav_handler.rs

style(server): correct clippy warnings

2026-05-04 12:58:30 +02:00

chunked_upload_handler.rs

refactor(authz): permet require_permission() as has_permission(), more explicit

2026-05-21 21:50:42 +02:00

contacts_handler.rs

feat(username|email): pass1: normalize auth.user data

2026-06-03 00:35:25 +02:00

dedup_handler.rs

fix+test: check hash ref count on copy-on-write (a duplicated beeing updated)

2026-05-13 15:55:41 +02:00

device_auth_handler.rs

chore: remove all executable attributes on non bash files

2026-04-01 23:14:42 +02:00

favorites_handler.rs

refactor(server): remove sort by size in pg_acl_engine.rs (dead code)

2026-05-29 13:14:16 +02:00

file_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

folder_handler.rs

fix(openapi): expose route missing /api/.../resources to openapi

2026-05-31 20:58:01 +02:00

grant_handler.rs

feat(user.prefered_locale): save user's locale + invited have same locale as inviters

2026-06-03 14:37:22 +02:00

i18n_handler.rs

feat(i18n): add i18n on server side

2026-06-03 13:27:12 +02:00

magic_link_handler.rs

security(/magic): no cache + no referer + no index

2026-06-03 16:19:03 +02:00

mod.rs

feat(api): can grant external user (via email)

2026-06-03 00:31:59 +02:00

music_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

photos_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

recent_handler.rs

chore(deprecated api): log a warning on serverside if a deprecated route is still used

2026-05-29 13:13:23 +02:00

search_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

share_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

subject_group_handler.rs

security(external_user): protect unnecessary route access to external users

2026-06-03 00:32:00 +02:00

trash_handler.rs

feat(trash): move trash API to normalized version (with cursor, orderBy) + normalize Trash section to existing components

2026-05-30 00:49:32 +02:00

users_handler.rs

feat(api): can grant external user (via email)

2026-06-03 00:31:59 +02:00

webdav_handler.rs

refactor(lifecycle hooks): simplify integration of new services

2026-05-22 13:40:58 +02:00

wopi_handler.rs

feat(authz): check permission on read handlers + check create permission on folder

2026-05-21 20:30:53 +02:00