jake/sofa
1
Fork 0
mirror of https://github.com/jakejarvis/sofa.git synced 2026-10-16 01:05:42 -04:00
Code Issues Packages Projects Releases Wiki Activity
363 Commits 4 Branches 5 Tags
d6ac2324e78841281d0b40e683a1079239d14729
Commit Graph
4 Commits
Author SHA1 Message Date
jakeandClaude Opus 5.5 d6ac2324e7 fix(discover): map TV date sorts, clamp TMDB page counts, and pause infinite scroll after a failed page 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-05 03:31:06 -04:00
jakeandClaude Sonnet 5.5 e5209f80fe fix(auth): key rate limits on the resolved client IP and restrict the Expo auth proxy 
Resolve the client IP from the TCP peer plus trusted-proxy X-Forwarded-For hops
(TRUSTED_PROXIES) and hand it to Better Auth in an internal header, so spoofed
forwarding headers can no longer rotate sign-in rate-limit buckets. The Expo
authorization proxy now only redirects to the OIDC provider's authorization endpoint.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-05 00:09:53 -04:00
jakeandClaude Opus 5.5 4c58b550b1 fix(server): cap request bodies and require a session before large uploads 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-04 23:33:36 -04:00
jakeandClaude Opus 5.5 6620f0b76f test(server): add test harness and auth coverage for every procedure 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-04 23:14:56 -04:00