advplyr
|
9ab35ef418
|
Update playlist endpoints to check user still has library access
|
2026-04-22 16:42:58 -05:00 |
|
advplyr
|
79cc9765cf
|
Update collection endpoints to check user library access
|
2026-04-22 16:29:47 -05:00 |
|
advplyr
|
80b39abaa2
|
Update library item batch api endpoints check users per-item access & return 403
|
2026-04-21 17:13:06 -05:00 |
|
advplyr
|
b7e8a0474a
|
Update bulk download endpoint ensure items are from the same library requested
|
2026-04-19 16:20:31 -05:00 |
|
advplyr
|
24cab79c66
|
Update filesystem/pathexists endpoint to use existing isSameOrSubPath func
|
2026-04-18 16:24:48 -05:00 |
|
advplyr
|
09fa0b38f5
|
Update podcast create path validation & fix relPath
|
2026-04-17 16:51:22 -05:00 |
|
advplyr
|
455e605162
|
Update author & library item image endpoints to clamp width/height query params
|
2026-04-17 16:30:08 -05:00 |
|
mikiher
|
fda1a6ea9b
|
Fix item_removed payload to include libraryId
|
2026-03-31 22:02:52 +03:00 |
|
advplyr
|
3faa6f3e7d
|
Update playlist create/update endpoint to strip all html tags
|
2026-03-19 16:57:22 -05:00 |
|
advplyr
|
9821c31f8e
|
Update collection create/update endpoints to strip html tags from collection name
|
2026-03-19 16:53:21 -05:00 |
|
advplyr
|
4bdd76d94c
|
Update podcast episode update endpoint to sanitize subtitle
|
2026-03-18 17:01:19 -05:00 |
|
advplyr
|
e5b7aea46c
|
Merge pull request #5063 from mandreko/idor-fixes
IDOR fixes
|
2026-03-08 17:26:03 -05:00 |
|
advplyr
|
6e0da3bf7a
|
Fix updating author name merging with same name authors in a different library #4628
|
2026-02-21 16:00:38 -06:00 |
|
Matt Andreko
|
ade1752e97
|
Fix IDOR bugs
|
2026-02-15 22:01:36 -05:00 |
|
Finn Dittmar
|
a5d2c1bd64
|
Fix Upload Lookup
|
2025-11-29 11:02:42 +01:00 |
|
Finn Dittmar
|
3e9ca51088
|
Fix region parameter extraction in findChapters
|
2025-11-27 21:40:29 +01:00 |
|
advplyr
|
a92ba564bd
|
Merge pull request #4750 from mikiher/providers-api
Add metadata providers API and use them on web client
|
2025-10-21 17:24:11 -05:00 |
|
advplyr
|
e684a8dc43
|
Update JSDocs & auto-formatting of PodcastFinder
|
2025-10-21 17:22:10 -05:00 |
|
mikiher
|
57c7b123f0
|
Fix codeQL error: Return json error object
|
2025-10-21 11:00:29 +03:00 |
|
mikiher
|
fd593caafc
|
SearchController: simplify query param validation logic
|
2025-10-21 09:38:35 +03:00 |
|
mikiher
|
b01e7570d3
|
Remove custom providers from library filterdata request
|
2025-10-19 10:54:26 +03:00 |
|
mikiher
|
0a8662d198
|
Merge providers API into a single endpoint
|
2025-10-19 10:53:27 +03:00 |
|
mikiher
|
888190a6be
|
Fix codeQL failures
|
2025-10-15 18:28:15 +03:00 |
|
mikiher
|
4f30cbf2f6
|
SearchController: New providers API, query param validation
|
2025-10-14 18:09:32 +03:00 |
|
advplyr
|
a87ea32715
|
Fix admin user unable to close sessions of other users #4746
|
2025-10-13 09:50:01 -05:00 |
|
advplyr
|
feed827223
|
Update settings update endpoint to validate allowedOrigins is array
|
2025-10-10 18:00:37 -05:00 |
|
advplyr
|
794f0ef42a
|
Fix server crash when transcode requests are made to the direct play endpoint #4555
|
2025-08-07 17:21:05 -05:00 |
|
advplyr
|
832165716b
|
Fix ereader update socket event sending all devices #4529
|
2025-07-24 17:29:08 -05:00 |
|
advplyr
|
45e8e72759
|
Update change password to support null or empty string passwords #4522
|
2025-07-22 15:17:00 -05:00 |
|
advplyr
|
8c38987d92
|
Fix podcast episode track index null in playback session
|
2025-07-22 14:44:36 -05:00 |
|
advplyr
|
e678fe6e2f
|
Update sessions modal to show username & update sessions endpoints to always return username
|
2025-07-16 16:56:07 -05:00 |
|
advplyr
|
8775e55762
|
Update jwt secret handling
|
2025-07-08 16:39:50 -05:00 |
|
advplyr
|
4ff7355262
|
Fix hashPassword
|
2025-07-08 09:14:07 -05:00 |
|
advplyr
|
9c8900560c
|
Seperate out auth strategies, update change password to return error status codes
|
2025-07-07 15:04:40 -05:00 |
|
advplyr
|
97afd22f81
|
Refactor Auth to breakout functions in TokenManager, handle token generation for OIDC
|
2025-07-06 16:43:03 -05:00 |
|
advplyr
|
e24eaab3f1
|
Log when token expiry is set via env var, api-keys create/update returns with user association
|
2025-07-06 13:10:14 -05:00 |
|
advplyr
|
8b995a179d
|
Add support for returning refresh token for mobile clients
|
2025-06-30 17:31:31 -05:00 |
|
advplyr
|
4d32a22de9
|
Update API Keys to be tied to a user, add apikey lru-cache, handle deactivating expired keys
|
2025-06-30 14:53:11 -05:00 |
|
advplyr
|
af1ff12dbb
|
Add get all, update and delete endpoints. Add api keys config page
|
2025-06-30 11:32:02 -05:00 |
|
advplyr
|
d96ed01ce4
|
Set up ApiKey model and create Api Key endpoint
|
2025-06-30 10:12:39 -05:00 |
|
advplyr
|
4f5123e842
|
Implement new JWT auth
|
2025-06-29 17:22:58 -05:00 |
|
advplyr
|
22f6e86a12
|
Fix pathexists filepath back to posix
|
2025-06-11 16:37:07 -05:00 |
|
advplyr
|
a6f10ca48e
|
Update upload endpoint to check user has access to library
|
2025-06-11 16:14:51 -05:00 |
|
advplyr
|
aac01d6d9a
|
Update pathexists endpoint to check user has access to library
|
2025-06-11 16:04:18 -05:00 |
|
advplyr
|
0135b3560c
|
Fix filesystem pathexists path join
|
2025-06-10 17:02:42 -05:00 |
|
advplyr
|
9052ceedd3
|
Sanitize media item & episode description on update
|
2025-05-31 17:01:58 -05:00 |
|
advplyr
|
6ce1806359
|
Update pathexists file system API endpoint
|
2025-05-26 16:56:50 -05:00 |
|
advplyr
|
336de49d8d
|
Add new api endpoint for direct playing audio files using session id #4259
|
2025-05-05 17:00:43 -05:00 |
|
advplyr
|
342d100f3e
|
Replace advanced options with presets/advanced card
|
2025-05-02 17:24:46 -05:00 |
|
advplyr
|
e0b90c6813
|
Add channels, codec and bitrate to tracks table & breakpoint updates
|
2025-05-02 15:06:31 -05:00 |
|