104 Commits

Include renames

Author	SHA1	Message	Date
sandrodachandClaude Opus 5.5	3709282a4f	fix(auth): longer IDs and invite codes, register limits, single-use invites (FLAW-32, FLAW-39, FLAW-40) ... - NewID uses 96 random bits; invite codes get their own 100 bits in Base32. - Registration and forgot-password are limited per address via loginGuard. - The invite is claimed atomically before the account is created and released again when the account cannot be created. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 19:28:09 +01:00
sandrodachandClaude Opus 5.5	1af3a6e90a	feat(auth): server-side sessions and current password for account changes (FLAW-30, FLAW-31) ... - Every login is a session (device, IP, last use); the token's jti is its ID. Sessions end on logout, per device from the profile, or after 30 idle days. - Tokens older than a day are renewed via the X-Session-Token header. - Changing password or login e-mail needs the current password; a new password logs out all other devices and mails the old address. - Demo reset keeps the demo visitors' sessions. - revoked_tokens is replaced by sessions (migration 4); everyone is logged out once after the upgrade. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 19:25:22 +01:00
sandrodachandClaude Opus 5.5	b2ecda9896	fix(security): safe links and security headers (FLAW-28, FLAW-29) ... safeHref lets only http, https and mailto become links (Markdown viewer, outliner, legal links); javascript: and friends show as text. A middleware sets a Content-Security-Policy (scripts only from MindSift, no framing, connections only to this server), X-Frame-Options, nosniff, Referrer-Policy and a Permissions-Policy. The two inline scripts of index.html moved to files so script-src stays 'self'. The second inline script also deleted every cache on each page load, which undermined the offline start; it is gone. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 19:02:13 +01:00
sandrodachandClaude Opus 5.5	3ca4ff7bce	chore: Semantic Versioning and a changelog from now on ... Tags become three-part (v0.6.0), the header shows the full version and pre-release tags no longer move :stable. CHANGELOG.md (Keep a Changelog) starts with an Unreleased section; older versions will be added from the history. The quantity field opens the number keypad on phones. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 18:55:32 +01:00