a197bf113f
feat: add granular signup disable flags ( #2765 )
2026-05-09 01:16:13 +00:00
8671f269e8
fix: lint project ( #2693 )
2026-05-08 16:04:22 +10:00
f54a8ed72f
feat: add turnstile captcha to auth flow ( #2703 )
2026-04-16 14:29:07 +10:00
455fef70bd
fix: folder view all page nested navigation and search filtering ( #2450 )
...
Add parentId query param support to documents/templates folder index
pages so View All correctly shows subfolders. Fix search not filtering
unpinned folders on documents page and broken mt- Tailwind class on
templates page.
2026-03-17 12:02:32 +02:00
66e357c9b3
feat: add email domain restriction for signups ( #2266 )
...
Co-authored-by: Lucas Smith <me@lucasjamessmith.me >
2026-03-14 16:32:34 +11:00
653ab3678a
feat: better ratelimiting ( #2520 )
...
Replace hono-rate-limiter with a Prisma/PostgreSQL bucketed counter
approach that works correctly across multiple instances without sticky
sessions.
- Add RateLimit model with composite PK (key, action, bucket) and atomic
upsert
- Create rate limit factory with window parsing, bucket computation, and
fail-open
- Define auth-tier and API-tier rate limit instances
- Add Hono middleware, rateLimitResponse helper, and tRPC
assertRateLimit helper
- Wire rate limit headers through AppError constructor (was declared but
never assigned)
- Apply rate limits to auth routes (email-password, passkey), tRPC
routes
(2FA email, link org account), API routes, and file upload endpoints
- Add cleanup cron job for expired rate limit rows (batched delete every
15 min)
- Remove hono-rate-limiter dependency
2026-02-20 12:23:02 +11:00
2e3d22c856
fix: use instance-specific emails for service accounts ( #2502 )
2026-02-16 11:52:19 +11:00
8fca029d96
fix: invalidate sessions on password reset and update ( #2076 )
2025-12-08 19:17:23 +11:00
9ac7b94d9a
feat: add organisation sso portal ( #1946 )
...
Allow organisations to manage an SSO OIDC compliant portal. This method
is intended to streamline the onboarding process and paves the way to
allow organisations to manage their members in a more strict way.
2025-09-09 17:14:07 +10:00
e6dc237ad2
feat: add organisations ( #1820 )
2025-06-10 11:49:52 +10:00
25bb6ffe77
fix: imports
2025-03-03 14:49:28 +11:00
a319ea0f5e
fix: add public profiles tests
2025-02-19 16:07:04 +11:00
1ed1cb0773
chore: refactor sessions
2025-02-16 00:44:01 +11:00
383b5f78f0
feat: migrate nextjs to rr7
2025-02-13 14:10:38 +11:00
Ephraim Duncan
David Nguyen
Lucas Smith
Catalin Pit