H1K0 4645107ea1 fix(backend): make access tokens revocable via session validation ...

The auth middleware trusted any unexpired, well-signed access token, so
logout, session termination and admin blocks had no effect until the
15-minute token expired. The middleware now validates that the token's
session is still active on every request (SessionRepo.GetByID), and
blocking a user deactivates all of their sessions, immediately revoking
their outstanding access tokens.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-10 14:09:25 +03:00

backend

fix(backend): make access tokens revocable via session validation

2026-06-10 14:09:25 +03:00

docs

docs(project): add reference Python/Flask implementation

2026-04-03 18:36:05 +03:00

frontend

fix(frontend): use $appSettings.tagRuleApplyToExisting on creating a new tag rule also

2026-04-07 11:59:09 +03:00

.env.example

fix(backend): cap upload size to prevent memory exhaustion

2026-06-10 14:07:34 +03:00

.gitattributes

chore(project): add .gitignore and .gitattributes

2026-04-03 18:35:22 +03:00

.gitignore

chore(project): add .gitignore and .gitattributes

2026-04-03 18:35:22 +03:00

CLAUDE.md

docs(project): document scoped commit naming convention in CLAUDE.md

2026-04-04 21:41:22 +03:00

openapi.yaml

feat(backend): apply tag rules retroactively to existing files on activation

2026-04-07 00:00:45 +03:00

S

Description

🎋Tanabata — web file manager with tags!

apicfile-managergolangpythonrestapitelegram-botwebapp

5.6 MiB

Languages

Go 50%

Svelte 38.6%

TypeScript 8.8%

PLpgSQL 1.4%

Dockerfile 0.5%

Other 0.7%