saopig1 a39fc25104 feat(auth): rate-limit /login+/setup, per-user session cap, periodic /me poll

2026-05-27 16:16:07 +08:00

..

api

fix(auth): atomic last-admin guards on role-change and delete

2026-05-27 15:55:11 +08:00

auth

fix(auth): race-safe first-run setup + rolling cookie max-age refresh

2026-05-27 14:54:19 +08:00

middleware

feat(auth): rate-limit /login+/setup, per-user session cap, periodic /me poll

2026-05-27 16:16:07 +08:00

server.ts

feat(auth): rate-limit /login+/setup, per-user session cap, periodic /me poll

2026-05-27 16:16:07 +08:00

websocket-auth.test.ts

feat(auth): two-role permission system (admin/member)

2026-05-27 15:35:15 +08:00

websocket.ts

fix: harden bot lifecycle, validate HTTP inputs, make YouTube truly optional

2026-04-11 01:35:14 +08:00