3 Commits

Author	SHA1	Message	Date
copilot-swe-agent[bot]	204000aabc	fix: merge main branch and renumber migration 027→037 ... Resolve 3 merge conflicts and renumber the automation_hooks migration to follow main's migration chain (036_add_document_translation_fields). Conflicts resolved: - app/api/__init__.py: add automation_router alongside main's new routers - app/utils/settings_service.py: add automation_hooks_enabled alongside compliance_enabled - tests/conftest.py: add AutomationHook alongside AuditLog/ComplianceTemplate imports Migration renumbered: - 027_add_automation_hooks → 037_add_automation_hooks - down_revision: 026_add_scheduled_jobs → 036_add_document_translation_fields Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>	2026-03-16 22:40:15 +00:00
copilot-swe-agent[bot]	06091546b0	fix(sharing): address security review findings ... - Use per-password random salt with PBKDF2-HMAC-SHA256 (stored as salt:hash) - Increase PBKDF2 iterations to 600,000 (OWASP 2023 recommendation) - Password for downloads now accepted via POST body (never URL query param) - Fail download request if view count cannot be incremented (prevents bypass) - Update tests to match new hashing format and POST password download Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>	2026-03-08 21:55:55 +00:00
copilot-swe-agent[bot]	0f91b8bb7c	feat(sharing): add document sharing with expiring links ... - Add SharedLink model with token, expiry, view limit, password hash - Add migration 025_add_shared_links - Add API endpoints: create, list, revoke (auth) + public info/download - Add management UI at /shared-links with revoke controls - Add public share landing page at /share/{token} - Add Share button on file_view.html - Add Shared Links to user dropdown in common.js - Write 35 unit tests covering all scenarios - Update UserGuide.md with sharing documentation Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>	2026-03-08 21:51:30 +00:00