EventSnap

fabi/EventSnap

Fork 0

Commit Graph

Author	SHA1	Message	Date
fabi	f08d858281	fix(security): high — live authz, XFF, SSE buffering, atomicity, pagination H1: auth extractor re-reads the live user row — trusts the DB role (not the JWT claim) and rejects banned users mid-session. e2e proves a demoted host loses powers and a banned host is locked out and can't self-unban. H2: client_ip takes the right-most XFF hop (the one Caddy appends); spoofed left-most entries are ignored, restoring IP-based throttles. H3: Caddy excludes /api/v1/stream from `encode` so SSE isn't buffered. H4: upload — quota increment + row insert + hashtag links now one txn. H5: feed keyset pagination tiebroken on (created_at, id) + composite index (migration 010); feed_delta bounded with LIMIT. H7: LightboxModal keys its comment load off upload.id, ending the SSE-driven refetch storm. H8: CSP via SvelteKit kit.csp (svelte.config.js) hardens the localStorage token model against injection. Migration 010 also adds the latent comment/comment_hashtag indexes. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-01 21:25:50 +02:00
fabi	b89b1d6ffa	chore: scaffold monorepo for EventSnap - Rust/Axum backend skeleton with all crates, multi-stage Dockerfile - SvelteKit + TypeScript frontend with Tailwind CSS v4, adapter-node, Dockerfile - docker-compose.yml: db (postgres:16) → app → frontend → caddy with healthcheck and named volumes - Caddyfile: TLS via Let's Encrypt, cache headers, API/media routing to backend - .env.example: all environment variables documented with defaults - README.md: project overview, features, stack, deploy guide, roadmap - .gitignore: excludes secrets, build artifacts, node_modules, media uploads Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-31 20:15:44 +02:00

Author

SHA1

Message

Date

fabi

f08d858281

fix(security): high — live authz, XFF, SSE buffering, atomicity, pagination

H1: auth extractor re-reads the live user row — trusts the DB role (not the
    JWT claim) and rejects banned users mid-session. e2e proves a demoted
    host loses powers and a banned host is locked out and can't self-unban.
H2: client_ip takes the right-most XFF hop (the one Caddy appends); spoofed
    left-most entries are ignored, restoring IP-based throttles.
H3: Caddy excludes /api/v1/stream from `encode` so SSE isn't buffered.
H4: upload — quota increment + row insert + hashtag links now one txn.
H5: feed keyset pagination tiebroken on (created_at, id) + composite index
    (migration 010); feed_delta bounded with LIMIT.
H7: LightboxModal keys its comment load off upload.id, ending the
    SSE-driven refetch storm.
H8: CSP via SvelteKit kit.csp (svelte.config.js) hardens the localStorage
    token model against injection.

Migration 010 also adds the latent comment/comment_hashtag indexes.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-01 21:25:50 +02:00

fabi

b89b1d6ffa

chore: scaffold monorepo for EventSnap

- Rust/Axum backend skeleton with all crates, multi-stage Dockerfile
- SvelteKit + TypeScript frontend with Tailwind CSS v4, adapter-node, Dockerfile
- docker-compose.yml: db (postgres:16) → app → frontend → caddy with healthcheck and named volumes
- Caddyfile: TLS via Let's Encrypt, cache headers, API/media routing to backend
- .env.example: all environment variables documented with defaults
- README.md: project overview, features, stack, deploy guide, roadmap
- .gitignore: excludes secrets, build artifacts, node_modules, media uploads

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-31 20:15:44 +02:00

2 Commits