e18aa3f42c
feat(api): implement rate limiting and SSRF protection across endpoints
...
- Added rate limiting to `reaction-users`, `search`, and `image-proxy` APIs to prevent abuse.
- Introduced SSRF protection in `image-proxy` to block requests to private IP ranges.
- Enhanced `link-preview` to use `linkedom` for HTML parsing and improved meta tag extraction.
- Refactored authentication checks in various pages to utilize middleware for cleaner code.
- Improved JWT key loading with error handling and security warnings for production.
- Updated `authFetch` utility to handle token refresh more efficiently with deduplication.
- Enhanced rate limiting utility to trust proxy headers from known sources.
- Numerous layout / design changes
2025-12-05 14:21:52 -05:00
d8d6c5ec21
refactor: add SubNav layout and per-subsite nav placeholders; switch Base to use SubNav
2025-11-28 09:07:55 -05:00
de50889b2c
- TRip: various ui/ux enhancements
...
- other minor changes
2025-11-26 14:42:57 -05:00
d671fbc130
feat: Add user display in navigation
...
misc: styling/css cleanup
2025-11-26 10:43:34 -05:00
05aa48af14
auth code changes / misc
2025-11-25 05:56:46 -05:00
a82d29cbf1
Refactor code structure for improved readability and maintainability, removed unnecessary console logs, removed old.js
2025-09-26 12:30:00 -04:00
f177315231
Enhance authentication flow with improved error handling and logging in requireAuthHook. Refine HLS stream initialization and metadata fetching in AudioPlayer to handle station changes gracefully. Improve toast notifications and autocomplete behavior in LyricSearch. Simplify RandomMsg logic and remove unused imports. Add track and album count display in MediaRequestForm and enhance artist selection. Introduce dark mode styles for tables and dialogs in RequestManagement.css. Adjust imports and ensure proper usage of requireAuthHook in index.astro and requests.astro.
2025-09-22 11:15:24 -04:00
3afc944a67
misc
2025-09-12 22:39:35 -04:00
1d0b310228
misc / bugfix: session refresh
2025-08-28 11:15:17 -04:00
315919186b
another commit without a list of specific changes! (misc)
2025-08-21 15:07:10 -04:00
1528931a29
misc
2025-08-20 15:57:59 -04:00
a13cbabdb4
rm console.debug's
2025-08-20 07:37:19 -04:00
fdbc84aee5
misc
2025-08-20 07:32:40 -04:00
e51be9697c
misc
2025-08-15 14:15:18 -04:00
31bd4e1b54
bugfix/ TRip: toasts not being dismissed
2025-08-14 13:30:12 -04:00
7c36302aec
misc
2025-08-14 13:26:51 -04:00
dbb70fc743
misc
2025-08-14 11:40:02 -04:00
ccea5db9e9
TRip changes/AudioPlayer hls setting tweaks
2025-08-11 15:52:38 -04:00
5309f1a080
Change authFetch calls within TRip/MediaRequestForm.jsx to use global API_URL from config.js, remove howler.js
2025-08-09 07:16:02 -04:00
21796e768e
various changes
2025-08-09 07:10:04 -04:00
