MechaCat02 4863219cf6 bugfix: equalise login response time across user-existence branches (0.34.1) ...

A login attempt against a non-existent username returned 401 in <1ms,
while the wrong-password branch ran argon2 verify (~50-100ms). Timing
the difference let an attacker enumerate valid usernames without ever
seeing a successful response. Run verify_password against a fixed
dummy argon2id hash on the no-user branch so both paths spend the
same compute.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-28 07:46:46 +02:00

..

common

feat: edit existing manga metadata (0.31.0)

2026-05-27 20:26:23 +02:00

fixtures/target

bugfix: chapter source key uses chapter id, not /pg-1/ (0.23.1)

2026-05-22 23:15:36 +02:00

api_auth.rs

bugfix: equalise login response time across user-existence branches (0.34.1)

2026-05-28 07:46:46 +02:00

api_authors.rs

feat: author pages with /authors/:id route (0.16.0)

2026-05-17 14:39:11 +02:00

api_bookmarks.rs

feat: bookmark create enqueues SyncChapterContent jobs (0.29.0)

2026-05-25 20:59:14 +02:00

api_chapters.rs

feat: route reader by chapter id, allow duplicate-numbered chapters (0.24.0)

2026-05-22 23:37:07 +02:00

api_collections.rs

feat: manga collections (0.17.0)

2026-05-17 17:43:06 +02:00

api_genres.rs

feat: manga metadata with status, authors, genres, tags, and search filters (0.15.0)

2026-05-17 14:32:03 +02:00

api_history.rs

feat: read & upload history (0.19.0)

2026-05-17 18:19:52 +02:00

api_mangas_cover.rs

feat: edit existing manga metadata (0.31.0)

2026-05-27 20:26:23 +02:00

api_mangas_metadata.rs

feat: manga metadata with status, authors, genres, tags, and search filters (0.15.0)

2026-05-17 14:32:03 +02:00

api_mangas.rs

feat: manga metadata with status, authors, genres, tags, and search filters (0.15.0)

2026-05-17 14:32:03 +02:00

api_preferences.rs

feat: continuous reader mode with persisted preference

2026-05-17 13:15:03 +02:00

api_tags.rs

feat: manga metadata with status, authors, genres, tags, and search filters (0.15.0)

2026-05-17 14:32:03 +02:00

api_uploads.rs

feat: route reader by chapter id, allow duplicate-numbered chapters (0.24.0)

2026-05-22 23:37:07 +02:00

crawler_browser_smoke.rs

feat: crawler scaffold with chromium launcher (0.22.0)

2026-05-20 22:07:56 +02:00

crawler_daemon.rs

feat: in-process crawler daemon with cron and worker pool (0.28.0)

2026-05-25 20:32:02 +02:00

crawler_incremental.rs

feat: incremental crawl mode with seed-completion gate (0.33.0)

2026-05-28 06:41:26 +02:00

crawler_jobs.rs

feat: crawler job queue ops and dedup index (0.27.0)

2026-05-25 19:59:09 +02:00

crawler_sync.rs

feat: route reader by chapter id, allow duplicate-numbered chapters (0.24.0)

2026-05-22 23:37:07 +02:00

health.rs

feat: nest API under /api/v1, structured error envelope, paged lists

2026-05-16 21:41:20 +02:00