Edouard Vanbelle 763ee82028 security(session): do not expose 'sid' from OIDC ...

prefer exposing origin of the session: passwod, opaque, magic_link, oidc, unknown

2026-08-09 16:36:42 +02:00

..

20260307000000_initial_schema.sql

chore: remove all executable attributes on non bash files

2026-04-01 23:14:42 +02:00

20260308000000_audio_schema.sql

Music Player & Playlist Manager

2026-04-08 15:14:03 +03:00

20260414000000_chunk_manifests.sql

feat(dedup): CDC sub-file deduplication with FastCDC + parallel chunk storage + dedup skip

2026-04-14 23:17:39 +02:00

20260507000000_session_family.sql

security: prevent re-use of refresh token (reduce surface for any stolen token)

2026-05-07 13:57:10 +02:00

20260520000000_rebac_access_grants.sql

feat(rebac): first pass

2026-05-20 22:56:00 +02:00

20260526000000_add_user_image.sql

feat(user-avatar): users can now edit there image (image is taken from OIDC picture)

2026-05-27 11:29:33 +02:00

20260527000001_files_category_order.sql

feat(swimlane): add swimlane engine with first version on SharedWithMe section

2026-05-28 00:15:05 +02:00

20260601000000_rebac_expiry_and_perms_cleanup.sql

refactor(share,grants): migrate expiration from legacy share into grants, simplify legacy share, normalize shareModal for better UX

2026-05-28 20:00:06 +02:00

20260601000001_cleanup_recent_invalid_item_ids.sql

fix(recent): prevent recent API having non UUID entries + correct any invalid entry in recent database

2026-05-29 13:13:23 +02:00

20260612000000_subject_groups.sql

feat(group): 1st implementation of Groups

2026-05-31 20:57:45 +02:00

20260612000001_share_grant_reverse_cascade.sql

fix(shares): remove orphan shares

2026-06-01 13:12:05 +02:00

20260612000002_auth_users_is_external.sql

feat(user): add is_external flag, will permit integration of external users (without any storage) but able to be invited

2026-06-01 22:51:57 +02:00

20260612000003_users_username_email_login.sql

feat(user): add given_name/family_name auth.users

2026-06-03 00:31:59 +02:00

20260612000004_magic_link_tokens.sql

feat(magiclink) prepare magic link support (login via email)

2026-06-03 00:31:59 +02:00

20260612000005_drop_external_subject_type.sql

feat(external users): email sanity + mock SMTP

2026-06-03 00:31:59 +02:00

20260620000000_username_optional_no_email_shape.sql

feat(username|email): pass1: normalize auth.user data

2026-06-03 00:35:25 +02:00

20260621000000_magic_link_request_challenge.sql

feat(passwordless): add cookie challenge + low TTL

2026-06-03 00:35:25 +02:00

20260622000000_auth_users_email_verified_at.sql

feat(email_verified): store email verification on a user

2026-06-03 00:35:25 +02:00

20260623000000_users_preferred_locale.sql

feat(user.prefered_locale): save user's locale + invited have same locale as inviters

2026-06-03 14:37:22 +02:00

20260624000000_users_notify_on_share.sql

feat(notify): add notif to internal users when granted

2026-06-05 11:25:06 +02:00

20260625000001_files_user_size_index.sql

fix(db-migration): fix 2 changes with same ID

2026-06-07 16:32:42 +02:00

20260625000002_folder_tree_modified_at.sql

fix(db-migration): fix 2 changes with same ID

2026-06-07 16:32:42 +02:00

20260626000000_tree_etag_statement_triggers.sql

perf(db): statement-level tree-ETag triggers; batched trash purge

2026-06-10 13:22:27 +00:00

20260627000000_async_tree_etag_queue.sql

fix

2026-06-10 22:03:49 +02:00

20260628000000_delta_upload_gin_index.sql

Delta-upload protocol: negotiate chunks by hash, upload only what changed

2026-06-11 14:34:02 +00:00

20260701000000_content_search_index.sql

Add embedded Tantivy full-text content search

2026-06-11 15:16:03 +00:00

20260702000000_drop_dead_file_indexes.sql

perf(db): drop two never-used indexes on storage.files

2026-06-15 12:34:57 +00:00

20260719000000_users_search_trgm.sql

perf: round 12 — auth write-path narrowing, fused quota gate, moka blob-cache index, media single-read, sized listing JSON

2026-07-19 01:32:00 +00:00

20260730000000_role_grants.sql

feat(roles): prepare migration ReBAC to roles

2026-06-18 02:47:06 +02:00

20260801000000_role_grants_enum.sql

refactor(role): use grant only

2026-06-18 02:47:06 +02:00

20260801000001_role_grants_cascade_triggers.sql

refactor(role): use grant only

2026-06-18 02:47:06 +02:00

20260801000002_drop_access_grants.sql

refactor(role): use grant only

2026-06-18 02:47:06 +02:00

20260801000003_places_geo_index.sql

feat(places): backend for the photo map (geo clusters API)

2026-06-19 10:57:01 +00:00

20260801000004_faces.sql

feat(faces): schema + feature flag for People (off by default)

2026-06-19 11:28:39 +00:00

20260802000000_blob_gc_grace.sql

Harden blob GC and supervise the content-index worker

2026-06-19 09:37:51 +00:00

20260802100000_drives_schema_additive.sql

fix(migrations): renumber drive migrations to avoid collision with 20260802000000_blob_gc_grace

2026-06-19 16:06:38 +02:00

20260802100001_drives_backfill.sql

fix(migrations): renumber drive migrations to avoid collision with 20260802000000_blob_gc_grace

2026-06-19 16:06:38 +02:00

20260802100002_drives_not_null.sql

fix(migrations): renumber drive migrations to avoid collision with 20260802000000_blob_gc_grace

2026-06-19 16:06:38 +02:00

20260802100003_tree_etag_drive_id.sql

fix(migrations): renumber drive migrations to avoid collision with 20260802000000_blob_gc_grace

2026-06-19 16:06:38 +02:00

20260802100004_copy_folder_tree_drive_id.sql

fix(migrations): renumber drive migrations to avoid collision with 20260802000000_blob_gc_grace

2026-06-19 16:06:38 +02:00

20260803000000_no_orphan_root_folder_trigger.sql

feat(drive): ensure that root drives are always linked to a drive

2026-06-19 16:06:38 +02:00

20260804000000_trash_items_drive_id.sql

feat(drive): plug trash to drives

2026-06-23 22:04:20 +02:00

20260805000000_external_mounts.sql

feat(mounts): external file mounts P1 — pluggable provider + read-only REST

2026-06-24 23:52:01 -06:00

20260806000000_personal_drive_quota_to_user_envelope.sql

feat(drive): personal drives have the user's quota in commun

2026-06-26 13:59:02 +02:00

20260807000000_cascade_drive_id_on_folder_move.sql

feat(drive): ensure drive_id updated on file|folder moved to another drive

2026-06-29 21:11:40 +02:00

20260808000000_copy_folder_tree_cross_drive.sql

fix(drive): fix drive_id on copy to other drive

2026-06-29 23:21:17 +02:00

20260825000000_webdav_dead_properties.sql

fix(webdav): RFC 4918 litmus compliance

2026-06-22 21:37:14 +02:00

20260830000000_cascade_path_trigger_column_list_fix.sql

fix(drive): move correct cascade of lpath

2026-06-30 22:47:52 +02:00

20260830000001_webdav_dead_properties_resource_id_rekey.sql

feat(webdav): bind dead prop to res. id rather path

2026-06-30 23:35:25 +02:00

20260830000002_copy_dead_properties_on_folder_tree.sql

feat(dead-props): ensure replication on copy

2026-06-30 23:48:44 +02:00

20260901000000_default_personal_photo_music_flags.sql

feat(drive): impl policy photo + music policies

2026-07-01 21:57:37 +02:00

20260901000001_files_media_timeline_by_drive_index.sql

feat(drive): impl policy photo + music policies

2026-07-01 21:57:37 +02:00

20260901000002_caller_group_ids_function.sql

feat(drive): prepare removal of user_id

2026-07-02 00:01:20 +02:00

20260902000000_files_folders_user_id_nullable.sql

feat(drive): stop writing in {file,folder}.user_id

2026-07-03 00:23:35 +02:00

20260902000001_copy_folder_tree_drop_user_id.sql

feat(drive): stop writing in {file,folder}.user_id

2026-07-03 00:23:35 +02:00

20260903000000_orphan_root_folder_cascade_delete_guard.sql

feat(drive): stop writing in {file,folder}.user_id

2026-07-03 00:23:35 +02:00

20260904000000_drop_files_folders_user_id.sql

feat(drive): remove all user_id ref in file or folder

2026-07-03 02:12:32 +02:00

20260906000000_role_grants_calendar_address_book.sql

feat(calendar,addressbook): prepare authz engine

2026-07-08 01:03:25 +02:00

20260906000001_backfill_calendar_address_book_role_grants.sql

feat(calendar,addressbook): migrate share to authz engine

2026-07-08 01:03:25 +02:00

20260906000002_drop_legacy_share_tables.sql

feat(calendar,addressbook): remove share tables

2026-07-08 01:03:25 +02:00

20260910000000_role_grants_playlist.sql

feat(music): move playlist to authz engine

2026-07-08 01:04:03 +02:00

20260910000001_backfill_playlist_role_grants.sql

feat(music): move playlist to authz engine

2026-07-08 01:04:03 +02:00

20260913000000_users_ui_preferences.sql

feat(user-perf): add ui user-perf + dotfile filter

2026-07-13 20:27:52 +02:00

20260913000001_calendar_events_recurrence_id.sql

fix(528): pass2 add recurrence_id field

2026-07-14 20:42:18 +02:00

20260916000000_null_personal_drive_quota.sql

fix(595): permit unlimited user quota

2026-07-15 22:21:51 +02:00

20260917000000_files_folder_name_index.sql

perf: eliminate N+1 hot-path queries, cache immutable lookups, stop re-compressing compressed bytes

2026-07-16 14:20:20 +00:00

20260918000000_listing_lower_name_indexes.sql

perf: keyset/LATERAL SQL shapes, auth+blob-cache single-flight, spool buffers, DTO interning

2026-07-17 11:10:27 +00:00

20260920000000_trash_drive_partial_indexes.sql

perf: round 10 — auth alloc purge, parent-herd batching, query-shape pack, NC 304s

2026-07-18 20:33:50 +00:00

20260921000000_users_created_at_index.sql

Optimize storage, GC, and upload hot paths

2026-07-22 02:06:29 +02:00

20260930000000_jobs_recoverable_runs.sql

doc(job-registry): add SQL entry for recoverable jobs

2026-07-28 22:01:11 +02:00

20260930000001_jobs_run_findings.sql

feat(recoverable-job): add findings

2026-07-29 07:57:06 +02:00

20261001000000_sessions_oidc_id_token.sql

feat(oidc): RP initiator logout

2026-08-03 07:59:14 +02:00

20261001000001_sessions_oidc_sid.sql

feat(oidc): impl back channel logout

2026-08-03 08:00:13 +02:00

20261001000002_auth_opaque.sql

chore(migration): update the migration timestamp

2026-08-04 07:18:40 +02:00

20261005000000_auth_opaque_per_envelope_ksf.sql

feat(opaque): permits ksf values change

2026-08-05 22:52:19 +02:00

20261010000000_federation_identity_rename.sql

refactor(oidc): prep. support of Open Cloud Mesh

2026-08-08 15:10:26 +02:00

20261011000000_users_normalized_email_index.sql

feat(oidc): support of +alias email (clean it up to reconciliate)

2026-08-08 22:21:55 +02:00

20261012000000_sessions_dpop_jkt.sql

feat(dpop): upgrade migration id

2026-08-09 01:56:07 +02:00

20261013000000_sessions_origin.sql

security(session): do not expose 'sid' from OIDC

2026-08-09 16:36:42 +02:00