bambuddy

mirror of https://github.com/maziggy/bambuddy.git synced 2026-09-30 19:21:33 +02:00

Files

T

maziggy d56b48c499 feat(auth): connected apps - sign in to external applications with Bambuddy

Minimal OAuth 2.0 authorization-code flow with PKCE (S256): admins register
an app with one exact callback URL (Settings > API Keys > Connected Apps);
/connect/authorize asks for consent once and returns a single-use, 60 s code
bound to app, callback and challenge; POST /api/v1/connect/token swaps it,
with the client secret, for the user's identity and permissions. Codes and
secrets stored hashed, exchanges rate-limited per client and IP, no redirect
before the callback is validated, API keys cannot authorize, refused while
auth is disabled. i18n for all 15 locales.

-----

fix(db): upgrading from 0.2.4.0 or older no longer crashes at startup

The #2974 failure-reason conversion ran before the #1378 migration that adds
print_log_entries.failure_reason, so older databases stopped with "no such
column: failure_reason". It now skips a table without the column, only runs
where a legacy label exists, and on SQLite rebuilds archive_fts first, since
archives created before that index existed trip "database disk image is
malformed" when updated.

2026-09-26 12:51:53 +02:00

__init__.py

…

asyncio_handlers.py

Keep the RTSPS proxy's handler set off the server object (issue #3001 )

2026-08-30 08:01:42 +02:00

auth.py

fix(slicer): keep protocol-handler download tokens valid for their whole TTL (issue #3029 )

2026-09-07 14:05:25 +02:00

catalog_defaults.py

…

compat.py