Commit Graph
7 Commits
Author SHA1 Message Date
b63fbce60d feat(search): find titles by IMDb ID
Search queries that look like an IMDb ID (e.g. tt0133093) are now resolved
through TMDB's find endpoint, respecting the movie/tv type filter.

Supersedes #60.

Co-authored-by: Gonçalo Fonseca <gcare.fonseca99@outlook.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-05 03:57:00 -04:00
jakeandClaude Opus 5.5 0f82de55cb refactor(core): move discover logic into @sofa/core/browse
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-05 03:56:10 -04:00
jakeandClaude Opus 5.5 07e8e79e51 test(server): characterize discover procedures
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-05 03:53:30 -04:00
jakeandClaude Opus 5.5 d6ac2324e7 fix(discover): map TV date sorts, clamp TMDB page counts, and pause infinite scroll after a failed page
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-05 03:31:06 -04:00
jakeandClaude Sonnet 5.5 e5209f80fe fix(auth): key rate limits on the resolved client IP and restrict the Expo auth proxy
Resolve the client IP from the TCP peer plus trusted-proxy X-Forwarded-For hops
(TRUSTED_PROXIES) and hand it to Better Auth in an internal header, so spoofed
forwarding headers can no longer rotate sign-in rate-limit buckets. The Expo
authorization proxy now only redirects to the OIDC provider's authorization endpoint.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-05 00:09:53 -04:00
jakeandClaude Opus 5.5 4c58b550b1 fix(server): cap request bodies and require a session before large uploads
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-04 23:33:36 -04:00
jakeandClaude Opus 5.5 6620f0b76f test(server): add test harness and auth coverage for every procedure
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-04 23:14:56 -04:00