Jannis Braun abdaf99bb4 fix(federation): address code review findings for FED-011 ...

- Fix race window: store pendingHmacSecret AFTER remote peer confirms,
  not before (admin endpoint + auto-rotation worker)
- Add hex validation on newSecret at /peer/rotate endpoint
- Use pending-secret-aware signing in initial sync worker
- Add test for corrupt state (pendingHmacSecret set, secretRotationAt null)

2026-03-31 21:01:02 +02:00

..

admin.ts

feat: add age-based media cleanup endpoint

2026-03-23 02:20:28 +01:00

auth.ts

feat(auth): upgrade existing federation stubs during registration instead of creating duplicates

2026-03-31 04:49:19 +02:00

channels.ts

feat: add category override API endpoints, fix channel categoryId reassignment, include isPrivate on categories

2026-03-21 18:29:25 +01:00

dm.ts

fix: federation relay for group DMs — origin normalization, missing federatedId, local-only broadcasts

2026-03-27 16:53:35 +01:00

explore.ts

feat: security hardening, DB indexes, token revocation, and input validation

2026-03-15 00:06:15 +01:00

federation.ts

fix(federation): address code review findings for FED-011

2026-03-31 21:01:02 +02:00

gif.ts

feat: GIF search (Klipy), stickers, emoji picker, and bug fixes

2026-03-15 02:04:37 +01:00

instance.ts

feat: dedicated Instance Settings modal with admin controls

2026-03-09 03:52:01 +01:00

livekit.ts

feat: bans system, voice moderation, and federated space settings fixes

2026-03-09 15:56:46 +01:00

messages.ts

feat(federation): include federation status columns in attachment queries

2026-03-27 04:40:48 +01:00

search.ts

feat: wire embeds into all message query and creation paths

2026-03-20 23:41:53 +01:00

settings.ts

feat(federation): add client peering integration, transparency indicator, and admin federation settings

2026-03-25 21:47:10 +01:00

social.ts

chore: add system docs, specs, and misc updates from other sessions

2026-03-31 03:40:34 +02:00

spaces.ts

feat: widen InstanceStreamingLimits.allowedResolutions to support 'native'

2026-03-21 23:22:46 +01:00

uploads.ts

fix: raise upload rate limit from 10 to 30 per minute

2026-03-23 02:55:00 +01:00

users.ts

fix: skip currentPassword check for federated users on change-password

2026-03-23 00:48:02 +01:00

utils.ts

refactor: extract metadata fetcher into reusable utility

2026-03-20 23:30:01 +01:00