Edouard Vanbelle 82bd2e4d22 fix(dpop): do not sign GET /... tumbnail/images/ basic assets ...

no need sign this simole GET to this simplify
an hijacked session could retreive these assets but cannot get the list of them

2026-08-09 01:56:08 +02:00

..

application

feat(DPoP): check requests and 401 on failure

2026-08-09 01:56:07 +02:00

bin

feat(DPoP): check requests and 401 on failure

2026-08-09 01:56:07 +02:00

common

feat(DPoP): add anti replay cache

2026-08-09 01:56:07 +02:00

domain

feat(DPoP): add verification + X-Forwarded-Host X-Forwarded-Proto

2026-08-09 01:56:07 +02:00

infrastructure

feat(DPoP): check requests and 401 on failure

2026-08-09 01:56:07 +02:00

interfaces

fix(dpop): do not sign GET /... tumbnail/images/ basic assets

2026-08-09 01:56:08 +02:00

AGENTS.md

fix: fix services accessig directly to localstorage

2026-08-02 22:20:46 +02:00

bench_support.rs

feat(thumbnails): WebP output with Accept content negotiation

2026-06-21 21:16:08 +02:00

integration_test_support.rs

refactor(role): use grant only

2026-06-18 02:47:06 +02:00

lib.rs

feat(mounts): external file mounts P1 — pluggable provider + read-only REST

2026-06-24 23:52:01 -06:00

main.rs

feat(DPoP): add API test

2026-08-09 01:56:07 +02:00

mount_it_support.rs

feat(mounts): external file mounts P1 — pluggable provider + read-only REST

2026-06-24 23:52:01 -06:00