Paul NothaftandPaul Nothaft b869de33a5 fix(backend): check the revocation store on gallery access (stable) (#1388) ...

* fix(backend): check the revocation store on gallery access

Gallery logout wrote to revoked_tokens correctly, but
verifyGalleryAccess never read it back — a logged-out gallery JWT
kept working until natural expiry. Admin auth already calls
isTokenRevoked(); gallery was the outlier.

Note: this gap was independently closed on main via a broader gallery-
access refactor (PR #1357), so no main-branch fix is needed there —
this is a stable-only backport of the same protection.

* fix(backend): check revocation on the admin-preview gallery token too

isAdminPreview() decoded the ?preview= admin JWT but never checked
isTokenRevoked — a revoked admin session kept working via a preview
link indefinitely. Same gap this branch already closed for the main
gallery-token path (GHSA-q7f7-gjx8-mf6h), just in the sibling
admin-preview check within the same file.

---------

Co-authored-by: Paul Nothaft <[email protected]>

2026-09-11 11:22:20 +02:00

..

__tests__

fix(backend): contain and sanitize the SQLite restore source path (#1393)

2026-09-11 11:22:17 +02:00

assets/fonts

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

docs

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

migrations

fix(backend): reject a replayed TOTP code within its validity window (stable) (#1398)

2026-09-11 11:21:46 +02:00

scripts

fix(backend): reject a replayed TOTP code within its validity window (stable) (#1398)

2026-09-11 11:21:46 +02:00

src

fix(backend): check the revocation store on gallery access (stable) (#1388)

2026-09-11 11:22:20 +02:00

.dockerignore

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

.env.example

feat(auth): admin TOTP MFA — enrollment, login challenge, recovery, CLI reset

2026-07-03 11:33:38 +02:00

.eslintrc.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

audit-backend.json

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

dependencies-backend.json

Upgrade nodemailer to 7.0.7 (GHSA-mm7p-fcc7-pg87)

2025-10-13 21:11:38 +02:00

Dockerfile

fix(docker): default NODE_ENV=production so non-compose deploys don't fall back to SQLite (#1038) (#1040)

2026-08-13 18:51:20 +02:00

Dockerfile.dev

fix(security): scan triage cleanup — drop dead deps, harden Docker/nginx/postMessage

2026-05-07 22:31:51 +02:00

ecosystem.config.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

jest.config.js

fix(security): bump sanitize-html to 2.17.7

2026-09-06 23:06:45 +02:00

jest.sanitizeHtml.js

fix(security): bump sanitize-html to 2.17.7

2026-09-06 23:06:45 +02:00

jest.setup.js

feat: overhaul public landing page and backup tooling

2025-09-19 16:39:18 +02:00

knexfile.js

fix(docker): default NODE_ENV=production so non-compose deploys don't fall back to SQLite (#1038) (#1040)

2026-08-13 18:51:20 +02:00

package-lock.json

fix(backend): bump sharp, nodemailer, multer, js-yaml, joi for security fixes (stable) (#1375)

2026-09-11 11:21:34 +02:00

package.json

fix(backend): bump sharp, nodemailer, multer, js-yaml, joi for security fixes (stable) (#1375)

2026-09-11 11:21:34 +02:00

server.js

fix(security): close three middleware gaps around the API edge

2026-09-03 12:14:02 +02:00

test-filter.js

docs: fix deployment/admin routing and CORS guidance; add AGENTS.md; ignore AGENTS.md (refs #18)

2025-09-05 15:01:16 +02:00

wait-for-db.sh

fix(docker): default NODE_ENV=production so non-compose deploys don't fall back to SQLite (#1038) (#1040)

2026-08-13 18:51:20 +02:00