ShenLinandCodex 523af855ba fix(auth): secure SSO account binding ...

- Issue and verify short-lived SSO binding state and proof tokens
- Bind provider callbacks to an HttpOnly browser session cookie
- Reject invalid or already-associated SSO identities during profile updates

Co-authored-by: Codex <267193182+codex@users.noreply.github.com>
Signed-off-by: jyxjjj <16695261+jyxjjj@users.noreply.github.com>

2026-09-01 18:45:40 +08:00

..

common

fix(meta): enforce case-insensitive access controls

2026-09-01 18:45:39 +08:00

ftp

feat(permissions): implement fine-grained permission control (#2145)

2026-03-26 14:42:35 +08:00

handles

fix(auth): secure SSO account binding

2026-09-01 18:45:40 +08:00

mcp

feat(mcp): add mcp endpoint for whole openlist (#2485)

2026-06-19 00:32:00 +08:00

middlewares

fix(meta): enforce case-insensitive access controls

2026-09-01 18:45:39 +08:00

s3

fix(server/s3): paginate recursive object listings (#2968)

2026-08-29 01:18:42 +08:00

sftp

refactor(bootstrap): move booting logic to bootstrap package (#1773)

2025-12-15 16:47:50 +08:00

static

fix: prevent panic in unaligned 64-bit atomic (#2637)

2026-06-22 14:37:44 +08:00

webdav

feat(permissions): implement fine-grained permission control (#2145)

2026-03-26 14:42:35 +08:00

debug.go

chore: standardize context keys with custom ContextKey type (#697)

2025-07-14 23:55:17 +08:00

ftp.go

perf: replace strings.Split with strings.SplitSeq (#2441)

2026-05-04 13:05:07 +08:00

mcp.go

feat(mcp): add mcp endpoint for whole openlist (#2485)

2026-06-19 00:32:00 +08:00

router.go

fix(upload): authorize direct upload destinations

2026-09-01 18:45:39 +08:00

s3.go

fix(gomod): go modules with tagged versions (#499)

2025-07-01 09:54:50 +08:00

sftp.go

feat(ldap): support webdav, ftp and sftp login (#1746)

2025-12-15 16:53:38 +08:00

utils.go

feat(ldap): support webdav, ftp and sftp login (#1746)

2025-12-15 16:53:38 +08:00

webdav.go

refactor(func): replace GinWithValue with GinAppendValues (#2475)

2026-05-15 17:59:53 +08:00