4 Commits

Include renames

Author	SHA1	Message	Date
Jannis Braun	017256162b	feat(server): add homeInstance to authenticate, add requireLocalUser guard	2026-04-02 10:45:50 +02:00
Jannis Braun	7c544c1ff4	feat: security hardening, DB indexes, token revocation, and input validation ... - SSRF protection: DNS resolution + private IP blocking on metadata fetcher - Upload security: CSP/X-Frame-Options headers, SVG forced download, nosniff - Auth hardening: JWT secret min length, password min 8 chars, token revocation via password_changed_at - Attachment ownership verification before linking to messages - Message length limit (4000 chars) enforced on client and server - Asset URL validation on avatar/banner updates - Federation instance validation (domain regex, origin scheme, length limits) - DB indexes on all FK columns for query performance - Migrations: nullable moderator columns, dm_messages reply_to FK constraint - File cleanup on avatar/banner replacement and space deletion - Fastify trustProxy, AbortController on fetches, typing map size cap	2026-03-15 00:06:15 +01:00
Jannis Braun	836f0acef6	feat: standardize input styling with tier system, add depth and admin features ... - Define 4 input tier CSS classes (input-standard, input-search, input-embedded, input-danger) in globals.css, migrating ~50 inputs across ~28 component files to use them - Add subtle border and inset shadow to solid input tiers for resting-state visibility - Fix focus ring clipping in settings panel scroll container - Fix phantom Tailwind tokens (border-border-primary, placeholder-txt-muted) - Add admin user management panel, storage management, and account deletion utilities	2026-03-14 13:49:32 +01:00
Jannis Braun	4fd17084a5	chore: Initial commit of Opencord base state	2026-02-18 02:49:21 +01:00