Dionisio fdbb2bf60a fix(security): patch critical IDOR & auth vulnerabilities ...

- Fix logout no-op: extract refresh token from cookie/body (auth_handler)
- Secure all 12 WebDAV handlers with AuthUser + resolve_path_for_user
- Secure all 7 batch handlers with caller_id ownership checks
- Add _owned variants: copy_file_owned, delete_file_owned, get_file_stream_owned, get_folder_owned
- Secure list_files_query: add AuthUser, SQL-level user_id filter, tenant-isolated ETag
- Remove deprecated unscoped resolve_path() and exists() from PathResolverService
- Remove dead list_files handler (unmounted, no auth)
- Add list_files_for_owner (SQL) and list_files_owned across trait chain

2026-03-05 10:30:39 +01:00

..

chunked_upload_service.rs

fix: resolve all clippy warnings and convert integration_tests to custom cfg

2026-03-04 23:55:08 +01:00

compression_service.rs

perf: replace dyn trait objects with concrete types to eliminate vtable overhead

2026-03-03 15:36:42 +00:00

dedup_service.rs

merge: resolve conflict in auth_factory.rs with origin/main

2026-03-03 15:42:28 +00:00

file_content_cache.rs

perf: replace dyn trait objects with concrete types to eliminate vtable overhead

2026-03-03 15:36:42 +00:00

file_system_i18n_service.rs

perf: replace dyn trait objects with concrete types to eliminate vtable overhead

2026-03-03 15:36:42 +00:00

image_transcode_service.rs

perf: replace dyn trait objects with concrete types to eliminate vtable overhead

2026-03-03 15:36:42 +00:00

jwt_service.rs

style: cargo fmt --all

2026-03-03 01:49:18 +01:00

login_lockout_service.rs

fix: resolve all clippy warnings and convert integration_tests to custom cfg

2026-03-04 23:55:08 +01:00

mod.rs

refactor: replace WebDAV LOCK stub with moka-backed lock store (auto-expire TTL)

2026-03-03 11:49:52 +01:00

oidc_service.rs

perf: replace dyn trait objects with concrete types to eliminate vtable overhead

2026-03-03 15:36:42 +00:00

password_hasher.rs

perf: replace dyn trait objects with concrete types to eliminate vtable overhead

2026-03-03 15:36:42 +00:00

path_resolver_service.rs

fix(security): patch critical IDOR & auth vulnerabilities

2026-03-05 10:30:39 +01:00

path_service.rs

fix: resolve all clippy warnings and convert integration_tests to custom cfg

2026-03-04 23:55:08 +01:00

thumbnail_service.rs

perf: replace dyn trait objects with concrete types to eliminate vtable overhead

2026-03-03 15:36:42 +00:00

trash_cleanup_service.rs

perf: replace dyn trait objects with concrete types to eliminate vtable overhead

2026-03-03 15:36:42 +00:00

webdav_lock_service.rs

fix: resolve all clippy warnings and convert integration_tests to custom cfg

2026-03-04 23:55:08 +01:00

wopi_discovery_service.rs

feat(wopi): add WOPI protocol support for collaborative editing

2026-02-21 13:39:27 +01:00

zip_service.rs

fix: resolve all clippy warnings and convert integration_tests to custom cfg

2026-03-04 23:55:08 +01:00