Dionisio Pozo 2317d594e3 Merge pull request #610 from EdouardVanbelle/security/grants2

2026-07-18 16:07:17 +02:00

..

admin_handler.rs

security(/api/dedup): normalize dedup admin routes into /api/admin

2026-07-17 21:51:48 +02:00

app_password_handler.rs

feat(passwordless): pass4: add env variable to enable mgaiclink on account with password

2026-06-03 00:35:25 +02:00

auth_handler.rs

feat(account): upgrade external to internal

2026-07-14 11:10:23 +02:00

batch_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

caldav_handler.rs

perf: round 5 — CalDAV cursor streaming, SPA interning gaps, NC href prefix, per-request micro-allocs

2026-07-17 15:19:00 +00:00

carddav_handler.rs

perf: round 6 backend — CardDAV cursor streaming, borrowed NC id chain, binary UUID decode, one-alloc hex

2026-07-18 09:03:33 +00:00

chunked_upload_handler.rs

chore(/api/uploads): maked as deprecated, use now /api/files/delta/

2026-07-17 19:01:46 +02:00

contacts_handler.rs

feat(calendar,addressbook): migrate share to authz engine

2026-07-08 01:03:25 +02:00

dedup_handler.rs

security(/api/dedup): normalize dedup admin routes into /api/admin

2026-07-17 21:51:48 +02:00

delta_upload_handler.rs

perf: serve ranges from RAM cache, stream ZIPs, overlap ingest settle, O(1) chunk gate

2026-07-16 16:50:07 +00:00

device_auth_handler.rs

chore: remove all executable attributes on non bash files

2026-04-01 23:14:42 +02:00

drive_handler.rs

perf: round 5 — CalDAV cursor streaming, SPA interning gaps, NC href prefix, per-request micro-allocs

2026-07-17 15:19:00 +00:00

favorites_handler.rs

perf: round 5 — CalDAV cursor streaming, SPA interning gaps, NC href prefix, per-request micro-allocs

2026-07-17 15:19:00 +00:00

file_handler.rs

perf: round 7 — photos timeline O(N²)→incremental, range-seek authz duplication, resources row-map clone

2026-07-18 13:11:41 +00:00

folder_handler.rs

perf: round 7 — photos timeline O(N²)→incremental, range-seek authz duplication, resources row-map clone

2026-07-18 13:11:41 +00:00

grant_handler.rs

feat(music): move playlist to authz engine

2026-07-08 01:04:03 +02:00

i18n_handler.rs

feat(i18n): add i18n on server side

2026-06-03 13:27:12 +02:00

magic_link_handler.rs

fix(magic-link): correct url to fit sveltekit

2026-07-14 03:16:27 +02:00

mod.rs

fix(webdav): remove spurious calendar_rest_handler module declaration

2026-06-25 22:44:27 +02:00

music_handler.rs

feat(openapi): show explicitly path requiring bearerAuth

2026-05-28 00:48:20 +02:00

people_handler.rs

refactor(api): remove 5 dead routes + stale deprecation markers

2026-06-21 11:35:09 +02:00

photos_handler.rs

feat(drive): prepare removal of user_id

2026-07-02 00:01:20 +02:00

recent_handler.rs

perf: round 5 — CalDAV cursor streaming, SPA interning gaps, NC href prefix, per-request micro-allocs

2026-07-17 15:19:00 +00:00

search_handler.rs

security(/api/admin): require admin by default

2026-07-17 20:20:05 +02:00

share_handler.rs

perf: round 6 backend — CardDAV cursor streaming, borrowed NC id chain, binary UUID decode, one-alloc hex

2026-07-18 09:03:33 +00:00

subject_group_handler.rs

security(external_user): protect unnecessary route access to external users

2026-06-03 00:32:00 +02:00

trash_handler.rs

feat(drive): add readonly policy

2026-07-16 01:02:15 +02:00

users_handler.rs

feat(api): can grant external user (via email)

2026-06-03 00:31:59 +02:00

webdav_handler.rs

Merge pull request #613 from AtalayaLabs/claude/performance-optimization-round-5

2026-07-18 10:30:11 +02:00

wopi_handler.rs

security(wopi): resolve PutFile drive_id from file, not caller's default

2026-07-17 20:43:42 +02:00