156 Commits

Include renames

Author	SHA1	Message	Date
Jannis Braun	d0ed43cf58	fix(federation): add nonce length validation and fix verification flow docs (FED-008)	2026-03-31 18:18:50 +02:00
Jannis Braun	9961d9012b	docs: update federation docs for FED-008 replay attack protection	2026-03-31 18:14:23 +02:00
Jannis Braun	75504e07c0	fix(federation): add per-peer rate limiting to relay endpoint (FED-007) ... Sliding-window rate limiter (30 req/min per peer origin) on POST /api/federation/relay, matching the existing accept endpoint pattern. Returns 429 when exceeded — outbox workers retry with backoff. Check runs before HMAC verification to avoid wasted computation on floods.	2026-03-31 17:33:57 +02:00
Jannis Braun	2cac39a460	fix(federation): replace DNS hairpin self-POST with direct function call (FED-005) ... Extract processRelayEvents() from the relay HTTP handler and call it directly in runInitialSyncForNewPeers(), eliminating the HTTP round-trip through public DNS that failed on networks without hairpin NAT.	2026-03-31 05:20:16 +02:00
Jannis Braun	c7bdfef038	docs: update federation identity resolution and auth specs for FED-006 fix ... - Document extractDomain, findFederatedUser, updated resolveOrCreateReplicatedUser - Update origin normalization table to reflect bare domain storage - Mark Known Issue #2 (duplicate user stubs) as resolved - Document federated stub upgrade behavior in auth registration flow	2026-03-31 04:55:51 +02:00
Jannis Braun	a3a7527c9e	chore: add system docs, specs, and misc updates from other sessions ... - Add complete docs/systems/ reference (18 system docs) - Add federation relay status doc and prior spec/plan docs - Remove superseded docs/federation-dm-s2s.md (replaced by docs/systems/federation.md) - CLAUDE.md updates - Minor fixes in social.ts, types.ts, AddDmMemberModal, NewDmModal, UserSettings	2026-03-31 03:40:34 +02:00