673 commits

Author	SHA1	Message	Date
Quentin	4ec234952f	Merge 5431665dfe into 47ea6b5092	2026-05-05 21:41:16 -04:00
advplyr	2c3108a1fa	Merge pull request #5163 from pjkottke/master ... The timestamp in the share URL should override the saved position for the user.	2026-04-25 17:15:23 -05:00
advplyr	928051744a	ShareController check ?t param is less than duration, revert frontend mounted usage of param	2026-04-25 17:13:22 -05:00
advplyr	7c0ca44727	Update podcast create/update endpoints to validate autoDownloadSchedule cron expression, validate cron expression before starting in CronManager	2026-04-24 16:55:42 -05:00
advplyr	9ab35ef418	Update playlist endpoints to check user still has library access	2026-04-22 16:42:58 -05:00
advplyr	79cc9765cf	Update collection endpoints to check user library access	2026-04-22 16:29:47 -05:00
advplyr	80b39abaa2	Update library item batch api endpoints check users per-item access & return 403	2026-04-21 17:13:06 -05:00
advplyr	b7e8a0474a	Update bulk download endpoint ensure items are from the same library requested	2026-04-19 16:20:31 -05:00
advplyr	24cab79c66	Update filesystem/pathexists endpoint to use existing isSameOrSubPath func	2026-04-18 16:24:48 -05:00
advplyr	09fa0b38f5	Update podcast create path validation & fix relPath	2026-04-17 16:51:22 -05:00
advplyr	455e605162	Update author & library item image endpoints to clamp width/height query params	2026-04-17 16:30:08 -05:00
peter.kottke	5a6b3d8e61	updates to allow share t argument to over-ride server stored position	2026-04-01 21:05:48 -04:00
mikiher	fda1a6ea9b	Fix item_removed payload to include libraryId	2026-03-31 22:02:52 +03:00
advplyr	3faa6f3e7d	Update playlist create/update endpoint to strip all html tags	2026-03-19 16:57:22 -05:00
advplyr	9821c31f8e	Update collection create/update endpoints to strip html tags from collection name	2026-03-19 16:53:21 -05:00
advplyr	4bdd76d94c	Update podcast episode update endpoint to sanitize subtitle	2026-03-18 17:01:19 -05:00
advplyr	e5b7aea46c	Merge pull request #5063 from mandreko/idor-fixes ... IDOR fixes	2026-03-08 17:26:03 -05:00
advplyr	6e0da3bf7a	Fix updating author name merging with same name authors in a different library #4628	2026-02-21 16:00:38 -06:00
Matt Andreko	ade1752e97	Fix IDOR bugs	2026-02-15 22:01:36 -05:00
Quentin King	5431665dfe	feat: Enable series name editing with duplicate validation ... - Remove disabled state from series name input in edit modal - Add duplicate name validation in SeriesController (resolves TODO) - Update nameIgnorePrefix when series name changes - Add frontend validation for duplicate series names - Add updateSeriesName method to PATCH series immediately on rename - Show backend error message in toast on failure - Add i18n string for duplicate name error message This enables users to rename existing series while preventing duplicate series names within the same library.	2026-01-04 11:20:38 -06:00
Finn Dittmar	a5d2c1bd64	Fix Upload Lookup	2025-11-29 11:02:42 +01:00
Finn Dittmar	3e9ca51088	Fix region parameter extraction in findChapters	2025-11-27 21:40:29 +01:00
advplyr	a92ba564bd	Merge pull request #4750 from mikiher/providers-api ... Add metadata providers API and use them on web client	2025-10-21 17:24:11 -05:00
advplyr	e684a8dc43	Update JSDocs & auto-formatting of PodcastFinder	2025-10-21 17:22:10 -05:00
mikiher	57c7b123f0	Fix codeQL error: Return json error object	2025-10-21 11:00:29 +03:00
mikiher	fd593caafc	SearchController: simplify query param validation logic	2025-10-21 09:38:35 +03:00
mikiher	b01e7570d3	Remove custom providers from library filterdata request	2025-10-19 10:54:26 +03:00
mikiher	0a8662d198	Merge providers API into a single endpoint	2025-10-19 10:53:27 +03:00
mikiher	888190a6be	Fix codeQL failures	2025-10-15 18:28:15 +03:00
mikiher	4f30cbf2f6	SearchController: New providers API, query param validation	2025-10-14 18:09:32 +03:00
advplyr	a87ea32715	Fix admin user unable to close sessions of other users #4746	2025-10-13 09:50:01 -05:00
advplyr	feed827223	Update settings update endpoint to validate allowedOrigins is array	2025-10-10 18:00:37 -05:00
advplyr	794f0ef42a	Fix server crash when transcode requests are made to the direct play endpoint #4555	2025-08-07 17:21:05 -05:00
advplyr	832165716b	Fix ereader update socket event sending all devices #4529	2025-07-24 17:29:08 -05:00
advplyr	45e8e72759	Update change password to support null or empty string passwords #4522	2025-07-22 15:17:00 -05:00
advplyr	8c38987d92	Fix podcast episode track index null in playback session	2025-07-22 14:44:36 -05:00
advplyr	e678fe6e2f	Update sessions modal to show username & update sessions endpoints to always return username	2025-07-16 16:56:07 -05:00
advplyr	8775e55762	Update jwt secret handling	2025-07-08 16:39:50 -05:00
advplyr	4ff7355262	Fix hashPassword	2025-07-08 09:14:07 -05:00
advplyr	9c8900560c	Seperate out auth strategies, update change password to return error status codes	2025-07-07 15:04:40 -05:00
advplyr	97afd22f81	Refactor Auth to breakout functions in TokenManager, handle token generation for OIDC	2025-07-06 16:43:03 -05:00
advplyr	e24eaab3f1	Log when token expiry is set via env var, api-keys create/update returns with user association	2025-07-06 13:10:14 -05:00
advplyr	8b995a179d	Add support for returning refresh token for mobile clients	2025-06-30 17:31:31 -05:00
advplyr	4d32a22de9	Update API Keys to be tied to a user, add apikey lru-cache, handle deactivating expired keys	2025-06-30 14:53:11 -05:00
advplyr	af1ff12dbb	Add get all, update and delete endpoints. Add api keys config page	2025-06-30 11:32:02 -05:00
advplyr	d96ed01ce4	Set up ApiKey model and create Api Key endpoint	2025-06-30 10:12:39 -05:00
advplyr	4f5123e842	Implement new JWT auth	2025-06-29 17:22:58 -05:00
advplyr	22f6e86a12	Fix pathexists filepath back to posix	2025-06-11 16:37:07 -05:00
advplyr	a6f10ca48e	Update upload endpoint to check user has access to library	2025-06-11 16:14:51 -05:00
advplyr	aac01d6d9a	Update pathexists endpoint to check user has access to library	2025-06-11 16:04:18 -05:00