advplyr
8463b8426a
Update library item cover PATCH endpoint to require the cover path to be in the library item libraryFiles array
2026-09-21 16:07:41 -05:00
advplyr
b5134a3287
Cleanup prober.js and fix redeclare
2026-09-20 15:36:15 -05:00
advplyr
8fb7a856d5
Fix LibraryItem dupe class member hasAudioFiles
2026-09-20 15:32:20 -05:00
advplyr
186733f6af
Remove duplicate podcastEpisodeModel get in Database
2026-09-20 14:44:21 -05:00
advplyr
1e5443f054
Clean up invalid where objects in LibraryScanner
2026-09-20 14:43:39 -05:00
advplyr
5077f87e0c
Fix undefined variable in podcastUtils
2026-09-19 16:59:02 -05:00
advplyr
608d3ddde8
Fix undefined binaryPath in BinaryManager
2026-09-19 16:57:01 -05:00
advplyr
4c27a7b68e
Merge branch 'missing_declaration' of https://github.com/binyaminyblatt/audiobookshelf into missing_declaration
2026-09-19 16:48:50 -05:00
advplyr
a3b150d049
Fix undefined var in nodeFfprobe
2026-09-19 16:48:45 -05:00
advplyr
088c4f542f
Cleanup scandir variables
2026-09-19 16:47:40 -05:00
Binyamin Blatt
6acb4b9005
fix no-undef in BackupManager
2026-09-20 00:45:24 +03:00
Binyamin Blatt
8781930ced
Fix undeclared variables
2026-09-20 00:01:56 +03:00
advplyr
5ec4a8a46e
Merge pull request #5510 from nichwall/typescript-migration-begin
...
Typescript initial migration framework
2026-09-17 17:11:58 -05:00
advplyr
eeaa408a2d
Merge pull request #5526 from mikiher/fix-logging-error
...
AudioMetadataManager: Fix logging error
2026-09-17 15:20:18 -05:00
advplyr
7e76eed8bb
Update library item updateMedia endpoint to no longer accept ebookFile, chapters and audioFiles in req body
2026-09-16 16:26:26 -05:00
advplyr and Finn Dittmar
e4e212cca7
Update comic book extractor file path sanitization
...
Co-authored-by: Finn Dittmar <finn@dittmar-ldk.de >
2026-09-16 16:07:33 -05:00
advplyr
fb43db4f75
Fix library narrator update/delete endpoint to be library scoped
2026-09-15 16:21:22 -05:00
advplyr
3b4895b1b0
Update author middleware check user can access library
2026-09-15 16:12:26 -05:00
advplyr
a06639886b
Fix share endpoints not sending 404 status
2026-09-14 17:31:47 -05:00
advplyr
37d7ee20ed
Add try/catch on ensureDir in upload endpoint
2026-09-14 17:25:37 -05:00
advplyr
eb8ed7f5b6
Add html sanitize to authLoginCustomMessage on auth-settings PATCH
2026-09-14 17:23:15 -05:00
advplyr
3d62a103ae
Update settings PATCH endpoint to only accept a fixed set of general settings (auth settings must go through the auth-settings endpoint)
2026-09-14 17:21:40 -05:00
advplyr
42bf9512b0
Update cover endpoints to only allow webp, jpeg and png as optional format param
2026-09-14 17:05:07 -05:00
mikiher
eba1909c9c
AudioMetadataManager: Fix logging error
2026-09-03 09:45:15 +03:00
nichwall
fbfb24c264
Fix: new packaging warnings
2026-08-27 23:53:57 -07:00
mikiher
c0b9110e4e
Make sure Next has basePath before remounting baseUrl
2026-08-27 12:17:10 +03:00
mikiher and Cursor
13432209ee
Restore the mount prefix when handing requests to Next
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-27 11:19:39 +03:00
advplyr
513a0679f5
Merge pull request #5280 from schummar/fix/collapsed-series-with-filters
...
fix: collapsed series with filters
2026-08-16 17:13:48 -05:00
mikiher
32fae4a7c6
Fix podcast rescan emitting stale episodes on item_updated
2026-07-28 12:26:32 +03:00
advplyr
c86f336536
Update delete session to return status 200 instead of json
2026-07-26 17:40:14 -05:00
advplyr
1876bfbfe7
Add delete auth session endpoint to logout individual session
2026-07-26 17:36:36 -05:00
advplyr
a7b380cd7a
Add pagination to /me/sessions endpoint & sessions account page table
2026-07-26 17:11:03 -05:00
advplyr
35a2c5e87c
Add /me/sessions endpoint and show sessions table on account page
2026-07-25 17:18:38 -05:00
advplyr
e56c1099e6
Add logout all devices button and extend auth logout endpoint
2026-07-24 17:44:03 -05:00
advplyr
c900676be7
User password changes invalidate sessions
2026-07-23 17:21:25 -05:00
advplyr
e9b533637f
Merge pull request #5376 from DanielAshley/contrib/refresh-grace-period
...
Make refresh-token grace period configurable (default 10 min)
2026-07-22 18:01:32 -04:00
advplyr
37b42601ef
Merge pull request #5363 from Vito0912/feat/newEndpoints
...
add progress and bookmarks specific endpoints
2026-07-22 17:10:51 -04:00
advplyr
4c65a87d5c
Update bookmarks endpoints to use json object as root
2026-07-22 16:05:37 -05:00
Finn Dittmar and advplyr
0e5618dcd8
Apply suggestions from code review
...
Co-authored-by: advplyr <dev@advplyr.com >
2026-07-22 10:20:41 +02:00
advplyr
d063d851e1
Merge pull request #5388 from mikiher/fix/bulk-download-permissions
...
Enforce per-item access checks on bulk library download
2026-07-21 18:34:13 -04:00
advplyr
6458e6d3d2
Merge pull request #5387 from mikiher/fix/refresh-token-auth
...
Reject refresh tokens on API and WebSocket authentication
2026-07-21 18:20:57 -04:00
advplyr
2d9f63963e
Merge pull request #5370 from mikiher/fix/root-user-delete-protection
...
Prevent admin users from deleting the root account
2026-07-20 18:35:32 -04:00
advplyr
f12abca3fc
Simplify user delete checks
2026-07-20 17:33:15 -05:00
advplyr
528d03fef3
Merge pull request #5386 from mikiher/fix/oidc-url-validation
...
Fix oidc url validation
2026-07-20 18:08:51 -04:00
advplyr
b93c3133a9
Update x-forwarded-proto to check comma separated value
2026-07-20 17:06:21 -05:00
advplyr
08bbf9cd9d
Update server settings to include host timezone for use in cron scheduler next run dates
2026-07-19 17:31:00 -05:00
Daniel
95af4812cd
Make the refresh-token grace period configurable (default 10 min)
...
When /auth/refresh rotates the refresh token, the previous token is kept
valid for a short grace period so a client that never received the
rotation response (e.g. a dropped or suspended mobile request) can retry
with the old token and get back the already-rotated current token
instead of a 401.
That window was hardcoded to 60 seconds, which is too short for real
mobile conditions: iOS backgrounding, VPN/proxy timeouts, or network
handoff can delay the retry past a minute, permanently locking the
session out (#5281 ).
Make it configurable via REFRESH_TOKEN_GRACE_PERIOD (seconds), following
the existing REFRESH_TOKEN_EXPIRY / ACCESS_TOKEN_EXPIRY pattern, and
raise the default to 10 minutes. Adds unit tests for the new config.
Fixes #5281
2026-07-18 21:42:06 -04:00
mikiher
8ec547e302
fix(auth): refresh tokens authentication in API and WebSocket requests
2026-07-16 18:58:44 +03:00
mikiher
32e4da8c92
fix(permissions): enforce per-item access on bulk library download
2026-07-16 18:11:19 +03:00
mikiher
0ce37004af
fix(auth): harden OIDC web callback URL validation
2026-07-16 17:11:11 +03:00
advplyr
Binyamin Blatt
mikiher
nichwall
Daniel