Paul Nothaft f0e6d2dfb1 fix: enforce gallery access and consolidate gallery workflows (#1357) ...

Harden gallery authentication and authorization, consolidate gallery workflows, and prevent token-bearing URLs from leaking through nginx request error logs.

2026-09-08 15:34:09 +02:00

..

adminAuthRoleFallback.test.js

fix(auth): fail closed when the adminAuth roles join errors (#974)

2026-08-03 14:48:20 +02:00

apiRateLimitGate.test.js

fix(security): close the case-sensitivity bypass in the API rate limiter

2026-09-02 09:43:11 +02:00

apiTokenRoleFallback.test.js

fix(auth): fail closed when the adminAuth roles join errors (#974)

2026-08-03 14:48:20 +02:00

authRateLimitGate.test.js

fix(security): rate-limit the password-change endpoints per IP too

2026-09-02 09:43:11 +02:00

galleryAdminPreview.test.js

feat(gallery): admin preview skips the password on protected galleries (#981)

2026-08-04 16:48:07 +02:00

galleryImageRateLimitSkip.test.js

fix(security): stop a gallery viewer's own image fetches spending the anonymous budget

2026-09-06 22:47:37 +02:00

maintenance.spaShell.test.js

feat(docker): all-in-one image (#1042) — my version of #1067 (#1068)

2026-08-18 22:15:49 +02:00

ownership.filterOwnedEventIds.test.js

…

securityHardeningBatch2.test.js

fix: enforce gallery access and consolidate gallery workflows (#1357)

2026-09-08 15:34:09 +02:00

sessionTimeout.isSessionExpired.test.js

…