peter 3e1ad6188e feat(downloads): public share-by-link + watch page backend ...

Share a download by a capability URL (/watch/{token}) that anyone can play on a login-free page —
distinct from the registered-user ACL share. Per-link controls: optional expiry, allow-download
toggle (stream-only vs downloadable), optional argon2 password. Revoke = delete.
- migration 0042 + DownloadLink model; app/downloads/links.py (token, HMAC grant sign/verify)
- owner endpoints (POST/GET/PATCH/DELETE links) + /recipients for the internal user picker
- public router (no auth): watch meta / password unlock→signed grant / range-aware file serve
  (inline vs attachment); unlock is rate-limited; meta verifies the file exists on disk
Verified end-to-end: 206 range, inline vs attachment, wrong-password 403, tampered-grant 403.

2026-07-04 04:19:29 +02:00

..

downloads

feat(downloads): public share-by-link + watch page backend

2026-07-04 04:19:29 +02:00

routes

feat(downloads): public share-by-link + watch page backend

2026-07-04 04:19:29 +02:00

static

chore: rebrand Subfeed -> Siftlode

2026-06-14 04:40:22 +02:00

sync

fix(titles): normalize titles at stub insert too (RSS/backfill/live-search)

2026-07-03 03:19:00 +02:00

youtube

chore: prepare repo for public release — scrub internal infra, rewrite README

2026-07-01 12:46:50 +02:00

__init__.py

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

auth.py

fix(downloads): file download honours the per-tab account (?account=)

2026-07-03 02:08:10 +02:00

config.py

fix(downloads): android_vr primary + POT web fallback (fixes intermittent DRM/bot errors)

2026-07-03 23:01:09 +02:00

db.py

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

email.py

chore: rename remaining subfeed references to siftlode

2026-06-21 06:53:12 +02:00

main.py

feat(downloads): public share-by-link + watch page backend

2026-07-04 04:19:29 +02:00

models.py

feat(downloads): public share-by-link + watch page backend

2026-07-04 04:19:29 +02:00

notifications.py

feat(notifications): durable per-user inbox (P1) + maintenance schema

2026-06-18 03:20:17 +02:00

progress.py

feat(scheduler): admin run-now/run-all triggers + live progress + completion notices

2026-06-18 04:01:10 +02:00

quota.py

feat(channels): channel-explore backend — about metadata, ephemeral provenance, cleanup

2026-06-30 02:52:44 +02:00

ratelimit.py

feat(demo): demo-account schema + reusable rate limiter

2026-06-16 09:17:14 +02:00

realtime.py

feat(messages): end-to-end encrypted real-time direct messaging backend

2026-06-25 22:05:35 +02:00

scheduler.py

feat(downloads): M3 — per-user quota + retention GC

2026-07-03 00:26:40 +02:00

security.py

refactor(auth): centralize token hashing, email validation & admin gating

2026-06-26 03:15:36 +02:00

state.py

refactor(auth): centralize token hashing, email validation & admin gating

2026-06-26 03:15:36 +02:00

sysconfig.py

feat(downloads): M3 — per-user quota + retention GC

2026-07-03 00:26:40 +02:00

titles.py

feat(titles): normalize video titles for display (feed, search, downloads)

2026-07-03 03:00:08 +02:00

utils.py

refactor(auth): centralize token hashing, email validation & admin gating

2026-06-26 03:15:36 +02:00

worker.py

feat(downloads): editor concat — multi-segment join (cut-list)

2026-07-04 03:15:45 +02:00