H1K0 4645107ea1 fix(backend): make access tokens revocable via session validation ...

The auth middleware trusted any unexpired, well-signed access token, so
logout, session termination and admin blocks had no effect until the
15-minute token expired. The middleware now validates that the token's
session is still active on every request (SessionRepo.GetByID), and
blocking a user deactivates all of their sessions, immediately revoking
their outstanding access tokens.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-10 14:09:25 +03:00

backend

fix(backend): make access tokens revocable via session validation

2026-06-10 14:09:25 +03:00

docs

docs(project): add reference Python/Flask implementation

2026-04-03 18:36:05 +03:00

frontend

fix(frontend): use $appSettings.tagRuleApplyToExisting on creating a new tag rule also

2026-04-07 11:59:09 +03:00

.env.example

fix(backend): cap upload size to prevent memory exhaustion

2026-06-10 14:07:34 +03:00

.gitattributes

chore(project): add .gitignore and .gitattributes

2026-04-03 18:35:22 +03:00

.gitignore

chore(project): add .gitignore and .gitattributes

2026-04-03 18:35:22 +03:00

CLAUDE.md

docs(project): document scoped commit naming convention in CLAUDE.md

2026-04-04 21:41:22 +03:00

openapi.yaml

feat(backend): apply tag rules retroactively to existing files on activation

2026-04-07 00:00:45 +03:00

S

Description

🎋 Tanabata — web file manager with tags!

apicdockerfile-managergolangpythonrestapispasveltetelegram-botwebapp

AGPL-3.0 6.2 MiB

Releases 1

3.0.0 Latest

2026-07-07 11:17:52 +03:00

Languages

Go 48.9%

Svelte 39.9%

TypeScript 8.7%

PLpgSQL 1.3%

Dockerfile 0.5%

Other 0.7%