You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

boojack d1cef7a9ab feat(auth): add private instance mode derived from instance_url ... Run the instance in private mode when instance_url is not configured: the API rejects anonymous requests except the auth-bootstrap set (sign-in, token refresh, instance profile/settings, SSO providers, share-link access) plus first-run user creation, and the web UI redirects anonymous visitors to /auth instead of /explore. Setting instance_url keeps the current public behavior. Access tokens and personal access tokens are never gated. Enforcement lives in a shared Authorizer used by both the Connect interceptor and the gRPC-gateway middleware; the file server applies the same rule to public-memo attachments and avatars. Also merges the duplicated Authenticate/AuthenticateToUser token dispatch behind resolveBearer, dedups the AuthContext unauthenticated state, extracts the redirect decision into a pure shouldGatePrivateInstance helper, and prints the access mode at startup.		7 days ago
..
test	feat(auth): add private instance mode derived from instance_url	7 days ago
acl_config.go	feat(auth): add private instance mode derived from instance_url	7 days ago
acl_config_test.go	feat(auth): add private instance mode derived from instance_url	7 days ago
ai_service.go	refactor: split STT and Audio-LLM into separate interfaces (#5928)	2 months ago
attachment_exif_test.go	fix(api): reduce memory pressure in backend paths	3 months ago
attachment_motion.go	…
attachment_service.go	fix(auth): harden authorization and username validation (#5890)	3 months ago
auth_service.go	fix: delete user cleanup (#5981)	2 months ago
auth_service_client_info_test.go	fix: fix legacy username auth flows (#5885)	3 months ago
authz.go	feat(auth): add private instance mode derived from instance_url	7 days ago
authz_test.go	feat(auth): add private instance mode derived from instance_url	7 days ago
common.go	fix(auth): harden authorization and username validation (#5890)	3 months ago
common_test.go	fix(api): reduce memory pressure in backend paths	3 months ago
connect_handler.go	…
connect_interceptors.go	feat(auth): add private instance mode derived from instance_url	7 days ago
connect_interceptors_test.go	chore(server): centralize CORS policy	1 month ago
connect_services.go	chore(webhook): reveal-later signing secret flow	2 weeks ago
header_carrier.go	…
health_service.go	…
idp_service.go	…
instance_service.go	feat(storage): add insecure_skip_tls_verify option for S3	3 weeks ago
instance_stats.go	feat(stats): admin instance resource statistics	2 months ago
instance_stats_test.go	feat(stats): admin instance resource statistics	2 months ago
link_metadata_test.go	feat: add link metadata endpoints	2 months ago
memo_attachment_service.go	fix(security): enforce attachment ownership on memo updates	2 months ago
memo_batch_helpers.go	…
memo_mention_helpers.go	feat(notification): add smtp email settings	2 months ago
memo_relation_service.go	…
memo_service.go	refactor: use the built-in max/min to simplify the code (#6060)	1 week ago
memo_service_converter.go	feat(memos): choose created or updated time for memos (#5894)	3 months ago
memo_service_filter.go	…
memo_share_service.go	fix: reduce list memo query overhead (#5880)	3 months ago
memo_update_helpers.go	…
notification_email.go	feat(notification): add smtp email settings	2 months ago
reaction_service.go	…
resource_name.go	fix: user resource names can be uuidv4 from idp sub claim (#5856)	3 months ago
shortcut_service.go	…
sse_event_helpers.go	…
sse_handler.go	fix(sse): stream initial response and refresh tokens	2 months ago
sse_hub.go	…
sse_hub_test.go	…
sse_service_test.go	fix: avoid update event on memo create attachments (#5961)	2 months ago
sso_username.go	fix(auth): harden authorization and username validation (#5890)	3 months ago
user_resource_name.go	fix(auth): harden authorization and username validation (#5890)	3 months ago
user_resource_name_test.go	fix(auth): harden authorization and username validation (#5890)	3 months ago
user_service.go	chore(webhook): reveal-later signing secret flow	2 weeks ago
user_service_stats.go	feat(stats): support filtered all-user stats	2 months ago
user_webhook_test.go	chore(webhook): reveal-later signing secret flow	2 weeks ago
v1.go	feat(auth): add private instance mode derived from instance_url	7 days ago