advplyr
5edd20dfa3
Merge pull request #5437 from rtainaan/codex/handle-repeated-upload-files
...
Fix upload crash with repeated file fields
2026-10-01 17:52:59 -05:00
advplyr
aef33df8d3
Update get series for library endpoint to ensure series belongs to library
2026-09-22 17:49:53 -05:00
advplyr
8463b8426a
Update library item cover PATCH endpoint to require the cover path to be in the library item libraryFiles array
2026-09-21 16:07:41 -05:00
advplyr
8fb7a856d5
Fix LibraryItem dupe class member hasAudioFiles
2026-09-20 15:32:20 -05:00
advplyr
fb43db4f75
Fix library narrator update/delete endpoint to be library scoped
2026-09-15 16:21:22 -05:00
advplyr
3b4895b1b0
Update author middleware check user can access library
2026-09-15 16:12:26 -05:00
advplyr
a06639886b
Fix share endpoints not sending 404 status
2026-09-14 17:31:47 -05:00
advplyr
37d7ee20ed
Add try/catch on ensureDir in upload endpoint
2026-09-14 17:25:37 -05:00
advplyr
eb8ed7f5b6
Add html sanitize to authLoginCustomMessage on auth-settings PATCH
2026-09-14 17:23:15 -05:00
advplyr
3d62a103ae
Update settings PATCH endpoint to only accept a fixed set of general settings (auth settings must go through the auth-settings endpoint)
2026-09-14 17:21:40 -05:00
Raymond (Kai) Tainaan
3f9afe57bc
Fix upload crash with repeated file fields
...
The multipart middleware returns an array when a field is repeated, but handleUpload treats every value as one file. Flatten the values before moving them so repeated and unique field names both work.
Signed-off-by: Raymond (Kai) Tainaan <282025710+rtainaan@users.noreply.github.com >
2026-08-06 23:36:07 -07:00
advplyr
c86f336536
Update delete session to return status 200 instead of json
2026-07-26 17:40:14 -05:00
advplyr
1876bfbfe7
Add delete auth session endpoint to logout individual session
2026-07-26 17:36:36 -05:00
advplyr
a7b380cd7a
Add pagination to /me/sessions endpoint & sessions account page table
2026-07-26 17:11:03 -05:00
advplyr
35a2c5e87c
Add /me/sessions endpoint and show sessions table on account page
2026-07-25 17:18:38 -05:00
advplyr
c900676be7
User password changes invalidate sessions
2026-07-23 17:21:25 -05:00
advplyr
37b42601ef
Merge pull request #5363 from Vito0912/feat/newEndpoints
...
add progress and bookmarks specific endpoints
2026-07-22 17:10:51 -04:00
advplyr
4c65a87d5c
Update bookmarks endpoints to use json object as root
2026-07-22 16:05:37 -05:00
Finn Dittmar and advplyr
0e5618dcd8
Apply suggestions from code review
...
Co-authored-by: advplyr <dev@advplyr.com >
2026-07-22 10:20:41 +02:00
advplyr
d063d851e1
Merge pull request #5388 from mikiher/fix/bulk-download-permissions
...
Enforce per-item access checks on bulk library download
2026-07-21 18:34:13 -04:00
advplyr
f12abca3fc
Simplify user delete checks
2026-07-20 17:33:15 -05:00
mikiher
32e4da8c92
fix(permissions): enforce per-item access on bulk library download
2026-07-16 18:11:19 +03:00
mikiher
3c016314e6
fix(auth): prevent admin users from deleting the root account
2026-07-15 20:34:02 +03:00
Finn Dittmar
4883d0f60c
add progress and bookmarks specific endpoints
2026-07-13 11:41:49 +02:00
mikiher
3417c0c721
Enhance PodcastController to handle enclosure updates, allowing for null values and object structure validation for enclosure properties.
2026-06-18 12:39:50 +03:00
Nicholas Wallace
c97b36e11c
Add ignoreDuplicates for bookAuthor when renaming to respect unique index
2026-05-21 21:06:17 -07:00
advplyr
2c3108a1fa
Merge pull request #5163 from pjkottke/master
...
The timestamp in the share URL should override the saved position for the user.
2026-04-25 17:15:23 -05:00
advplyr
928051744a
ShareController check ?t param is less than duration, revert frontend mounted usage of param
2026-04-25 17:13:22 -05:00
advplyr
7c0ca44727
Update podcast create/update endpoints to validate autoDownloadSchedule cron expression, validate cron expression before starting in CronManager
2026-04-24 16:55:42 -05:00
advplyr
9ab35ef418
Update playlist endpoints to check user still has library access
2026-04-22 16:42:58 -05:00
advplyr
79cc9765cf
Update collection endpoints to check user library access
2026-04-22 16:29:47 -05:00
advplyr
80b39abaa2
Update library item batch api endpoints check users per-item access & return 403
2026-04-21 17:13:06 -05:00
advplyr
b7e8a0474a
Update bulk download endpoint ensure items are from the same library requested
2026-04-19 16:20:31 -05:00
advplyr
24cab79c66
Update filesystem/pathexists endpoint to use existing isSameOrSubPath func
2026-04-18 16:24:48 -05:00
advplyr
09fa0b38f5
Update podcast create path validation & fix relPath
2026-04-17 16:51:22 -05:00
advplyr
455e605162
Update author & library item image endpoints to clamp width/height query params
2026-04-17 16:30:08 -05:00
peter.kottke
5a6b3d8e61
updates to allow share t argument to over-ride server stored position
2026-04-01 21:05:48 -04:00
mikiher
fda1a6ea9b
Fix item_removed payload to include libraryId
2026-03-31 22:02:52 +03:00
advplyr
3faa6f3e7d
Update playlist create/update endpoint to strip all html tags
2026-03-19 16:57:22 -05:00
advplyr
9821c31f8e
Update collection create/update endpoints to strip html tags from collection name
2026-03-19 16:53:21 -05:00
advplyr
4bdd76d94c
Update podcast episode update endpoint to sanitize subtitle
2026-03-18 17:01:19 -05:00
advplyr
e5b7aea46c
Merge pull request #5063 from mandreko/idor-fixes
...
IDOR fixes
2026-03-08 17:26:03 -05:00
advplyr
6e0da3bf7a
Fix updating author name merging with same name authors in a different library #4628
2026-02-21 16:00:38 -06:00
Matt Andreko
ade1752e97
Fix IDOR bugs
2026-02-15 22:01:36 -05:00
Finn Dittmar
a5d2c1bd64
Fix Upload Lookup
2025-11-29 11:02:42 +01:00
Finn Dittmar
3e9ca51088
Fix region parameter extraction in findChapters
2025-11-27 21:40:29 +01:00
advplyr
a92ba564bd
Merge pull request #4750 from mikiher/providers-api
...
Add metadata providers API and use them on web client
2025-10-21 17:24:11 -05:00
advplyr
e684a8dc43
Update JSDocs & auto-formatting of PodcastFinder
2025-10-21 17:22:10 -05:00
mikiher
57c7b123f0
Fix codeQL error: Return json error object
2025-10-21 11:00:29 +03:00
mikiher
fd593caafc
SearchController: simplify query param validation logic
2025-10-21 09:38:35 +03:00
advplyr
Raymond (Kai) Tainaan
Finn Dittmarandadvplyr
mikiher
Nicholas Wallace
peter.kottke
Matt Andreko