peter 02714e4986 fix(auth): a cookie that lands after sign-out no longer signs the browser back in ...

A renewal answers with the session its request started with. Each session now
carries an id; signing out, or signing in as someone else, revokes it
(revoked_sessions, migration 0120), and a cookie carrying a revoked id is
refused. A cookie from before session ids gets one drawn from the cookie
itself. The race after log-out-everywhere fails closed and stays.

2026-11-14 17:56:36 +01:00

..

plex

feat: tag chips count their channels, Plex shows a file's size, a skip waits, Continue watching opens whole

2026-11-04 19:27:46 +01:00

__init__.py

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

_account.py

fix(activity): runs keep their true outcome and spend, the page reaches every kept row, a closing dialog leaves the server log alone

2026-10-18 15:38:32 +02:00

_common.py

fix(feed): an out-of-range seed or cursor is refused, not a 500

2026-11-07 21:48:15 +01:00

_keyset.py

feat(activity): one Activity page — runs, admin actions, server log and quota under one filter bar

2026-10-18 03:45:18 +02:00

admin_logs.py

fix(activity): runs keep their true outcome and spend, the page reaches every kept row, a closing dialog leaves the server log alone

2026-10-18 15:38:32 +02:00

admin.py

fix(downloads): a suspended user's queued jobs wait, and a clip too big for the space left says so

2026-10-10 20:28:52 +02:00

audit.py

fix(activity): runs keep their true outcome and spend, the page reaches every kept row, a closing dialog leaves the server log alone

2026-10-18 15:38:32 +02:00

auth.py

fix(auth): a cookie that lands after sign-out no longer signs the browser back in

2026-11-14 17:56:36 +01:00

channels.py

fix(channels): the Length column shows the sum alone

2026-11-08 00:10:28 +01:00

config.py

feat(activity): one Activity page — runs, admin actions, server log and quota under one filter bar

2026-10-18 03:45:18 +02:00

debug_sessions.py

test: the request commit check sees Core DML and row locks

2026-10-20 00:45:20 +02:00

diagnostics.py

chore(comments): drop epic, sprint and review-round ids from the code

2026-10-05 00:19:39 +02:00

discover.py

fix(feed): an out-of-range seed or cursor is refused, not a 500

2026-11-07 21:48:15 +01:00

downloads.py

feat(downloads): a clip or an edit can be a GIF, shared as a picture

2026-11-11 01:50:55 +01:00

feed.py

fix(feed): an out-of-range seed or cursor is refused, not a 500

2026-11-07 21:48:15 +01:00

files.py

feat(downloads): a clip or an edit can be a GIF, shared as a picture

2026-11-11 01:50:55 +01:00

health.py

feat: M1 foundation — compose stack, FastAPI, Google OAuth, encrypted tokens

2026-06-11 01:01:37 +02:00

me.py

fix(search): every related and live-search request takes a slot, and a failed one gives it back

2026-10-25 00:32:26 +02:00

notifications.py

test(fence): owner filters in any form, statement writes under any name, core commits by list

2026-10-20 00:45:21 +02:00

playlists.py

fix(playlists): "+N without length" counts every video the sum left out

2026-11-08 00:49:21 +01:00

public.py

feat(downloads): a clip or an edit can be a GIF, shared as a picture

2026-11-11 01:50:55 +01:00

quota.py

refactor(core): the core's owner filters go through userscope, each held by a second account

2026-10-19 23:36:01 +02:00

runs.py

fix(reader): the Takeout import holds up under abuse, races and a run it cannot see

2026-10-23 20:48:23 +02:00

saved_views.py

fix(views,tags): a rename onto a taken name names the taken one, not the row's old name

2026-10-29 23:07:54 +01:00

scheduler.py

refactor(catalog): the HTTP layer reads through queries and writes through the service

2026-10-19 02:32:20 +02:00

search.py

fix(playlists): a reorder counts among the writes, and what the third review found

2026-11-02 23:43:34 +01:00

setup.py

feat(config): job intervals live in sysconfig, every setting says when it applies, the unread SponsorBlock default goes

2026-10-18 02:23:15 +02:00

sync.py

refactor(catalog): the HTTP layer reads through queries and writes through the service

2026-10-19 02:32:20 +02:00

tags.py

fix: share, upload, crop, auto-skip, tag chips and See all hold what they claim

2026-11-06 00:09:39 +01:00

tokens.py

refactor(core): the core's owner filters go through userscope, each held by a second account

2026-10-19 23:36:01 +02:00

version.py

feat(version): /api/version + build-time version/commit stamping

2026-06-15 00:06:57 +02:00