eee377e081
Cleanup TokenManager logs
2026-05-13 16:23:26 -05:00
b0aaa24660
Update socket events to check client is admin & validate log level
2026-05-12 16:57:28 -05:00
47ea6b5092
Update book/podcast scanner to sanitize description pulled from metadata
2026-05-05 17:18:49 -05:00
40869bcf39
fix: set correct Content-Type for RSS feed audio files
...
Express's mime package does not recognize .m4b, causing it to fall back
to application/octet-stream. This reuses the existing
getAudioMimeTypeFromExtname utility (already applied to the download
endpoint) to set the correct audio/mp4 header before sendFile.
Fixes #5041
2026-05-02 22:13:35 -04:00
92df92ec99
Fix recent episodes endpoint cache not being cleared when updating media progress #5159
2026-04-26 16:51:08 -05:00
2c3108a1fa
Merge pull request #5163 from pjkottke/master
...
The timestamp in the share URL should override the saved position for the user.
2026-04-25 17:15:23 -05:00
928051744a
ShareController check ?t param is less than duration, revert frontend mounted usage of param
2026-04-25 17:13:22 -05:00
3ccdcaec1a
Implement SSRF filter for podcast episode downloads
2026-04-25 16:46:54 -05:00
7c0ca44727
Update podcast create/update endpoints to validate autoDownloadSchedule cron expression, validate cron expression before starting in CronManager
2026-04-24 16:55:42 -05:00
d6a2e5596b
Fix undefined variable in error log for when podcast cron is invalid
2026-04-24 16:18:56 -05:00
a5362de9cc
Update podcast createFromRequest to sanitize html description
2026-04-23 14:34:59 -05:00
9ab35ef418
Update playlist endpoints to check user still has library access
2026-04-22 16:42:58 -05:00
79cc9765cf
Update collection endpoints to check user library access
2026-04-22 16:29:47 -05:00
80b39abaa2
Update library item batch api endpoints check users per-item access & return 403
2026-04-21 17:13:06 -05:00
b7e8a0474a
Update bulk download endpoint ensure items are from the same library requested
2026-04-19 16:20:31 -05:00
39adefb632
Update backup load & upload to remove tempfile on failed backups, validate details filesize & close zip
2026-04-18 17:03:37 -05:00
24cab79c66
Update filesystem/pathexists endpoint to use existing isSameOrSubPath func
2026-04-18 16:24:48 -05:00
b27f21fd95
Update podcastUtils to sanitize episode subtitle from rss feed
2026-04-17 16:59:22 -05:00
09fa0b38f5
Update podcast create path validation & fix relPath
2026-04-17 16:51:22 -05:00
455e605162
Update author & library item image endpoints to clamp width/height query params
2026-04-17 16:30:08 -05:00
88667d00a1
Merge pull request #5115 from rktjmp/fix-mka-opus-desktop-streaming
...
Force AAC transcode when streaming mka+opus to desktop client
2026-04-10 16:54:18 -05:00
94c426bd97
Update comments on matroska
2026-04-10 16:42:39 -05:00
5a6b3d8e61
updates to allow share t argument to over-ride server stored position
2026-04-01 21:05:48 -04:00
fda1a6ea9b
Fix item_removed payload to include libraryId
2026-03-31 22:02:52 +03:00
ab3bd6f4a1
Update JS docs
2026-03-30 16:22:27 -05:00
093124aac6
Emit proper author_updated/added events when updating book media
2026-03-30 22:02:56 +03:00
5de92d08f9
Fix share playback session not including coverAspectRatio
2026-03-29 15:36:07 -05:00
3faa6f3e7d
Update playlist create/update endpoint to strip all html tags
2026-03-19 16:57:22 -05:00
9821c31f8e
Update collection create/update endpoints to strip html tags from collection name
2026-03-19 16:53:21 -05:00
4bdd76d94c
Update podcast episode update endpoint to sanitize subtitle
2026-03-18 17:01:19 -05:00
874e9e1856
Update API Key jwtAuthCheck to check user active status
2026-03-18 16:17:45 -05:00
a47c869d0b
Update migration file to v2.33.0
2026-03-12 16:45:08 -05:00
eb0383d37a
Merge pull request #5073 from kevingatera/perf/minimal-upstream-patchset
...
Improve personalized/discover query performance and cache invalidation behavior
2026-03-12 16:38:26 -05:00
e66ffb9c23
Add indexes to MediaProgress and BookSeries models
2026-03-12 16:37:59 -05:00
972193b193
Update server settings authLoginCustomMessage to sanitize on save and load
2026-03-11 17:18:05 -05:00
690a7e0da9
Update session DeviceInfo with sanitize on clientDeviceInfo
2026-03-11 17:03:07 -05:00
d9355ac3aa
Force AAC transcode when streaming mka+opus to desktop client
...
Matroska audio containers (aka mka files) with Opus codec streams inside
were unplayable on the desktop client because hls.js was unable to
decode the stream, resulting in an infinitely "spinning" play button.
When configuring a stream, we now check for the opus codec and force AAC
transcoding.
Matroska containers support other codecs besides Opus, eg: mp3, which do
not require transcoding and work fine before this patch, which is why we
check for opus in codecsToForceAAC instead of AudioMimeType.MKA in
mimeTypesToForceAAC.
The AudioMimeType.OPUS mimetype is already marked as requiring
transcoding but since its inside a container this check does not
evaluate to true, we must check the codec explicitly.
2026-03-11 00:35:12 +11:00
e5b7aea46c
Merge pull request #5063 from mandreko/idor-fixes
...
IDOR fixes
2026-03-08 17:26:03 -05:00
c156b063f5
Merge pull request #5036 from kctdfh/Slightly-better-subtitle-parsing-logic
...
Improved subtitle parsing to account for bare colon in title
2026-03-08 17:12:55 -05:00
c0319ebbac
Adjust discover/search changes for API compatibility
2026-02-23 19:22:45 -05:00
6e0da3bf7a
Fix updating author name merging with same name authors in a different library #4628
2026-02-21 16:00:38 -06:00
f1a2e56054
Add database indexes for discover query performance
2026-02-19 20:11:49 -05:00
d2915e689f
Speed up personalized shelves and reduce search payload size
2026-02-19 20:11:38 -05:00
05d9ab81f9
Improve API cache invalidation for high-churn models
2026-02-19 20:11:24 -05:00
ade1752e97
Fix IDOR bugs
2026-02-15 22:01:36 -05:00
fa5fa7b788
Fix server crash on /me/progress/:libraryItemId/:episodeId? when episodeId is not passed in for a podcast library item #5058
2026-02-14 17:17:12 -06:00
c15cb48def
Improved subtitle parsing to account for bare colon in title
2026-02-06 14:31:09 -05:00
122fc34a75
Fix server crash filtering by decade with collapsed series
2025-12-24 17:07:05 -06:00
04eb3bc437
Fix server crash on audible match #4931
2025-12-23 16:44:29 -06:00
7b37c98e88
Book tags genres dedupe ( #4927 )
...
* Update Audible provider dedupe genres/tags and return tags as array
* Update custom metadata provider to dedupe tags/genres and return tags as array
2025-12-21 15:38:34 -06:00
advplyr
Brandon
peter.kottke
mikiher
Oliver Marriott
Kevin Gatera
Matt Andreko
Khashayar Toodehfallah