advplyr
a6cde926ee
Merge pull request #5336 from francisrath/fix-broken-help-links
...
CodeQL / Analyze (push) Waiting to run
Build and Push Docker Image / build (push) Waiting to run
Integration Test / build and test (push) Waiting to run
Run Unit Tests / Run Unit Tests (push) Waiting to run
Run Component Tests / Run Component Tests (push) Has been cancelled
Update outdated in-app help links to new docs site structure
2026-07-22 18:07:58 -04:00
advplyr
e8db14fe33
Update collection help docs link
2026-07-22 17:07:32 -05:00
advplyr
e9b533637f
Merge pull request #5376 from DanielAshley/contrib/refresh-grace-period
...
Make refresh-token grace period configurable (default 10 min)
2026-07-22 18:01:32 -04:00
advplyr
8b97da500d
Remove TokenManager test
2026-07-22 16:58:03 -05:00
advplyr
37b42601ef
Merge pull request #5363 from Vito0912/feat/newEndpoints
...
add progress and bookmarks specific endpoints
2026-07-22 17:10:51 -04:00
advplyr
5da4ec51ce
Remove MeController test
2026-07-22 16:05:59 -05:00
advplyr
4c65a87d5c
Update bookmarks endpoints to use json object as root
2026-07-22 16:05:37 -05:00
Finn Dittmar
0e5618dcd8
Apply suggestions from code review
...
Co-authored-by: advplyr <dev@advplyr.com>
2026-07-22 10:20:41 +02:00
advplyr
d063d851e1
Merge pull request #5388 from mikiher/fix/bulk-download-permissions
...
CodeQL / Analyze (push) Waiting to run
Build and Push Docker Image / build (push) Waiting to run
Integration Test / build and test (push) Waiting to run
Run Unit Tests / Run Unit Tests (push) Waiting to run
Enforce per-item access checks on bulk library download
2026-07-21 18:34:13 -04:00
advplyr
6458e6d3d2
Merge pull request #5387 from mikiher/fix/refresh-token-auth
...
Reject refresh tokens on API and WebSocket authentication
2026-07-21 18:20:57 -04:00
advplyr
70953d8c82
Slim down TokenManager test
2026-07-21 17:18:58 -05:00
advplyr
2d9f63963e
Merge pull request #5370 from mikiher/fix/root-user-delete-protection
...
CodeQL / Analyze (push) Waiting to run
Build and Push Docker Image / build (push) Waiting to run
Integration Test / build and test (push) Waiting to run
Run Unit Tests / Run Unit Tests (push) Waiting to run
Prevent admin users from deleting the root account
2026-07-20 18:35:32 -04:00
advplyr
f12abca3fc
Simplify user delete checks
2026-07-20 17:33:15 -05:00
advplyr
bced308462
Trim down UserController test
2026-07-20 17:31:03 -05:00
advplyr
528d03fef3
Merge pull request #5386 from mikiher/fix/oidc-url-validation
...
Fix oidc url validation
2026-07-20 18:08:51 -04:00
advplyr
b93c3133a9
Update x-forwarded-proto to check comma separated value
2026-07-20 17:06:21 -05:00
mikiher
8d9db8d103
fix OidcAuthStrategy test module load order
2026-07-20 18:43:15 +03:00
advplyr
08bbf9cd9d
Update server settings to include host timezone for use in cron scheduler next run dates
CodeQL / Analyze (push) Has been cancelled
Build and Push Docker Image / build (push) Has been cancelled
Integration Test / build and test (push) Has been cancelled
Run Unit Tests / Run Unit Tests (push) Has been cancelled
2026-07-19 17:31:00 -05:00
Daniel
95af4812cd
Make the refresh-token grace period configurable (default 10 min)
...
When /auth/refresh rotates the refresh token, the previous token is kept
valid for a short grace period so a client that never received the
rotation response (e.g. a dropped or suspended mobile request) can retry
with the old token and get back the already-rotated current token
instead of a 401.
That window was hardcoded to 60 seconds, which is too short for real
mobile conditions: iOS backgrounding, VPN/proxy timeouts, or network
handoff can delay the retry past a minute, permanently locking the
session out (#5281 ).
Make it configurable via REFRESH_TOKEN_GRACE_PERIOD (seconds), following
the existing REFRESH_TOKEN_EXPIRY / ACCESS_TOKEN_EXPIRY pattern, and
raise the default to 10 minutes. Adds unit tests for the new config.
Fixes #5281
2026-07-18 21:42:06 -04:00
mikiher
8ec547e302
fix(auth): refresh tokens authentication in API and WebSocket requests
2026-07-16 18:58:44 +03:00
mikiher
32e4da8c92
fix(permissions): enforce per-item access on bulk library download
2026-07-16 18:11:19 +03:00
mikiher
0ce37004af
fix(auth): harden OIDC web callback URL validation
2026-07-16 17:11:11 +03:00
mikiher
527745b54e
refactor(server): centralize request HTTPS and origin detection
2026-07-16 17:10:42 +03:00
mikiher
3c016314e6
fix(auth): prevent admin users from deleting the root account
2026-07-15 20:34:02 +03:00
advplyr
59c7d0275c
Merge pull request #5354 from mikiher/scan-author-events
...
CodeQL / Analyze (push) Has been cancelled
Build and Push Docker Image / build (push) Has been cancelled
Integration Test / build and test (push) Has been cancelled
Run Unit Tests / Run Unit Tests (push) Has been cancelled
Emit author socket events when book scans create or link authors
2026-07-13 19:27:31 -04:00
Finn Dittmar
4883d0f60c
add progress and bookmarks specific endpoints
2026-07-13 11:41:49 +02:00
mikiher
9d9ab49664
Batch author numBooks updates at scan end via authors_num_books_updated
2026-07-10 17:37:31 +03:00
advplyr
82aec5f60c
Merge pull request #5341 from mikiher/expanded-minified-superset
...
CodeQL / Analyze (push) Has been cancelled
Build and Push Docker Image / build (push) Has been cancelled
Integration Test / build and test (push) Has been cancelled
Run Unit Tests / Run Unit Tests (push) Has been cancelled
Add all minified fields to expanded library item JSON
2026-07-09 16:56:45 -05:00
mikiher
7ee5e1bdf6
Emit author socket events when book scans create or link authors
2026-07-09 10:35:18 +03:00
mikiher
3bb53d939d
Add all minified fields to expanded library item JSON so socket updates remain a strict superset of shelf payloads
2026-07-01 22:30:21 +03:00
advplyr
6f03467f35
Update links in the README
Run Unit Tests / Run Unit Tests (push) Has been cancelled
2026-06-29 16:46:33 -05:00
advplyr
b2f593f1c4
Update readme organizing docs link & remove api docs link
2026-06-29 16:43:24 -05:00
advplyr
58dcda36a5
Cleanup readme and link to contributing docs
2026-06-29 16:37:54 -05:00
advplyr
354e0bf793
Update readme remove reverse proxy set up and link to docs page
2026-06-29 16:32:41 -05:00
Francis Rath
0784373b61
Update outdated in-app help links to new docs site structure
...
The help (?) links throughout the client pointed to the old
www.audiobookshelf.org/guides/* pages, which no longer exist and
resolve to a 404. Update all of them to the current
audiobookshelf.org/docs/documentation/* locations.
2026-06-29 03:02:19 +02:00
advplyr
2f219ea3cc
Merge pull request #5325 from mikiher/file-upload-internal-api
...
CodeQL / Analyze (push) Has been cancelled
Build and Push Docker Image / build (push) Has been cancelled
Integration Test / build and test (push) Has been cancelled
Run Unit Tests / Run Unit Tests (push) Has been cancelled
Let next.js handle file uploads through internal-api routes
2026-06-25 17:03:34 -05:00
mikiher
56e60b8420
Server.js: Let next.js handle file uploads through internal-api routes
2026-06-23 14:08:16 +03:00
advplyr
9b92b5de34
Merge pull request #5318 from mikiher/match-update-episode-enclosure
...
CodeQL / Analyze (push) Has been cancelled
Build and Push Docker Image / build (push) Has been cancelled
Integration Test / build and test (push) Has been cancelled
Run Unit Tests / Run Unit Tests (push) Has been cancelled
Enhance PodcastController to handle enclosure updates
2026-06-20 17:06:32 -05:00
mikiher
3417c0c721
Enhance PodcastController to handle enclosure updates, allowing for null values and object structure validation for enclosure properties.
2026-06-18 12:39:50 +03:00
advplyr
cbda0360aa
Merge pull request #5291 from mikiher/allowed-dev-origins
...
CodeQL / Analyze (push) Has been cancelled
Build and Push Docker Image / build (push) Has been cancelled
Integration Test / build and test (push) Has been cancelled
Run Unit Tests / Run Unit Tests (push) Has been cancelled
Read AllowedDevOrigins from dev.js into ALLOWED_DEV_ORIGINS env var
2026-06-04 15:13:34 -05:00
mikiher
036bc081f0
index.js: Read AllowedDevOrigins from dev,js into ALLOWED_DEV_ORIGINS env var
2026-06-04 14:03:59 +03:00
advplyr
e70e4b9d40
Fix typo on onTest notification body
CodeQL / Analyze (push) Has been cancelled
Build and Push Docker Image / build (push) Has been cancelled
Integration Test / build and test (push) Has been cancelled
Run Unit Tests / Run Unit Tests (push) Has been cancelled
2026-05-30 15:43:50 -05:00
advplyr
aacdcc47ec
Version bump v2.35.1
CodeQL / Analyze (push) Has been cancelled
Run Component Tests / Run Component Tests (push) Has been cancelled
Build and Push Docker Image / build (push) Has been cancelled
Integration Test / build and test (push) Has been cancelled
Run Unit Tests / Run Unit Tests (push) Has been cancelled
2026-05-28 15:22:55 -05:00
advplyr
499b52b4dd
Update Sequelize where query for User username/email case insensitive
2026-05-28 14:49:49 -05:00
advplyr
1bad2d9072
Cleanup abmetadata file parsing & fix server crash #5268 #4287 #5142
CodeQL / Analyze (push) Waiting to run
Build and Push Docker Image / build (push) Waiting to run
Integration Test / build and test (push) Waiting to run
Run Unit Tests / Run Unit Tests (push) Waiting to run
2026-05-27 17:33:14 -05:00
advplyr
c009db9f28
Merge pull request #5256 from nichwall/fix-bookauthor-collision-on-rename
...
CodeQL / Analyze (push) Has been cancelled
Build and Push Docker Image / build (push) Has been cancelled
Integration Test / build and test (push) Has been cancelled
Run Unit Tests / Run Unit Tests (push) Has been cancelled
Fix duplicate bookAuthor creation when renaming authors
2026-05-22 15:43:13 -05:00
advplyr
325469c5a5
Merge pull request #5255 from nichwall/refresh-token-uniqueness
...
Add unique UUID to access and refresh tokens
2026-05-22 15:39:01 -05:00
Nicholas Wallace
c97b36e11c
Add ignoreDuplicates for bookAuthor when renaming to respect unique index
2026-05-21 21:06:17 -07:00
Nicholas Wallace
e944b2a2f5
Add unique UUID to access and refresh tokens
2026-05-21 17:08:39 -07:00
advplyr
2d0a5462d2
Merge branch 'master' of https://github.com/advplyr/audiobookshelf
CodeQL / Analyze (push) Has been cancelled
Run Component Tests / Run Component Tests (push) Has been cancelled
Build and Push Docker Image / build (push) Has been cancelled
Verify all i18n files are alphabetized / update_translations (push) Has been cancelled
Integration Test / build and test (push) Has been cancelled
Run Unit Tests / Run Unit Tests (push) Has been cancelled
2026-05-17 14:31:45 -05:00
