copilot-swe-agent[bot] 06091546b0 fix(sharing): address security review findings ...

- Use per-password random salt with PBKDF2-HMAC-SHA256 (stored as salt:hash)
- Increase PBKDF2 iterations to 600,000 (OWASP 2023 recommendation)
- Password for downloads now accepted via POST body (never URL query param)
- Fail download request if view count cannot be incremented (prevents bypass)
- Update tests to match new hashing format and POST password download

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-03-08 21:55:55 +00:00

..

404.html

feat: rename project from DocuNova to DocuElevate, update related documentation and templates

2025-04-03 23:25:51 +02:00

500.html

feat(ui): add ARIA attributes for accessibility improvements

2026-02-28 16:04:33 +00:00

about.html

feat: update all OpenAI/ChatGPT refs + settings dropdown for fixed-value fields

2026-02-23 20:06:57 +00:00

admin_plans.html

feat(billing): expose Stripe price IDs in plan API, add Stripe Setup Wizard and sync endpoints

2026-03-08 15:14:42 +00:00

admin_stripe_wizard.html

fix(billing): address code review - remove duplicate mode logic, accessibility improvements, robust test assertions

2026-03-08 15:18:53 +00:00

admin_users.html

feat(auth): password reset, forgot username, and admin user management for local accounts

2026-03-08 10:06:08 +00:00

api_tokens.html

feat(api): add personal API tokens and enhance webhook integration UI

2026-03-08 18:42:55 +00:00

attribution.html

chore: apply ruff formatting and fix whitespace issues

2026-02-13 09:12:11 +00:00

audit_log.html

feat(ui): add ARIA attributes for accessibility improvements

2026-02-28 16:04:33 +00:00

backup.html

fix(backup): address code review feedback - accessibility, CSRF, docs, imports

2026-03-07 22:08:47 +00:00

base.html

Merge pull request #556 from christianlouis/copilot/feature-universal-dashboard

2026-03-08 19:08:11 +01:00

billing_success.html

feat(auth): add local user signup, email verification, and Stripe billing

2026-03-07 13:15:15 +00:00

cookies.html

feat(privacy): implement GDPR and global privacy compliance

2026-02-25 15:15:24 +00:00

credentials.html

feat(ui): add ARIA attributes for accessibility improvements

2026-02-28 16:04:33 +00:00

db_wizard.html

docs(database): update configuration guides with wizard cross-references, clean up review feedback

2026-03-06 10:13:40 +00:00

dropbox_callback_error.html

chore: apply ruff formatting and fix whitespace issues

2026-02-13 09:12:11 +00:00

dropbox_callback.html

feat(auth): save OAuth credentials per-user to UserIntegration records

2026-03-08 18:41:13 +00:00

dropbox.html

feat(auth): save OAuth credentials per-user to UserIntegration records

2026-03-08 18:41:13 +00:00

duplicates.html

feat(duplicates): add duplicate document detection and management

2026-03-02 10:21:57 +00:00

file_detail.html

feat(files): show assigned pipeline info on file status and detail views

2026-03-07 11:14:49 +00:00

file_view.html

feat(sharing): add document sharing with expiring links

2026-03-08 21:51:30 +00:00

filemanager.html

feat(admin): enhance file manager with DB reconciliation view (filesystem/database/reconcile tabs)

2026-02-21 09:20:59 +00:00

files.html

feat(api): implement proper pagination for file list API

2026-03-01 17:31:56 +00:00

forgot_password.html

chore: update plan to include forgot-username and login label clarification

2026-03-08 09:44:59 +00:00

forgot_username.html

feat(auth): password reset, forgot username, and admin user management for local accounts

2026-03-08 10:06:08 +00:00

google_drive_callback_error.html

chore: apply ruff formatting and fix whitespace issues

2026-02-13 09:12:11 +00:00

google_drive_callback.html

feat(auth): save OAuth credentials per-user to UserIntegration records

2026-03-08 18:41:13 +00:00

google_drive.html

feat(auth): save OAuth credentials per-user to UserIntegration records

2026-03-08 18:41:13 +00:00

help.html

test(support): improve Zammad user context tests with meaningful assertions

2026-03-08 18:33:39 +00:00

imap_accounts.html

fix(ui): move IMAP modals inside Alpine.js x-data scope so create/edit/delete buttons work

2026-03-08 15:04:23 +00:00

imprint.html

chore: apply ruff formatting and fix whitespace issues

2026-02-13 09:12:11 +00:00

index.html

feat(ui): show marketing landing page for unauthenticated multi-user visitors

2026-03-07 19:43:58 +00:00

integrations_dashboard.html

Merge pull request #560 from christianlouis/copilot/add-webhook-snippet-and-api-tokens

2026-03-08 21:42:28 +01:00

license.html

chore: apply ruff formatting and fix whitespace issues

2026-02-13 09:12:11 +00:00

login.html

feat(auth): password reset, forgot username, and admin user management for local accounts

2026-03-08 10:06:08 +00:00

onboarding.html

feat: add multi-step user onboarding wizard

2026-03-07 11:12:21 +00:00

onedrive_callback_error.html

chore: apply ruff formatting and fix whitespace issues

2026-02-13 09:12:11 +00:00

onedrive_callback.html

feat(auth): save OAuth credentials per-user to UserIntegration records

2026-03-08 18:41:13 +00:00

onedrive.html

feat(auth): save OAuth credentials per-user to UserIntegration records

2026-03-08 18:41:13 +00:00

password_reset_form.html

feat(auth): add local user signup, email verification, and Stripe billing

2026-03-07 13:15:15 +00:00

pipelines.html

refactor(pipelines): address code review - shared get_current_user_id, aria-live, deduplicate user ID logic

2026-03-07 10:39:19 +00:00

pricing.html

fix(ui): make pricing page CTAs link to /signup when local signup is enabled

2026-03-07 21:18:17 +00:00

privacy.html

feat(privacy): implement GDPR and global privacy compliance

2026-02-25 15:15:24 +00:00

queue_dashboard.html

feat(ui): add ARIA attributes for accessibility improvements

2026-02-28 16:04:33 +00:00

search.html

style(search): address code review - use const/let, fix date timezone, deduplicate filter keys

2026-03-01 13:59:23 +00:00

settings.html

feat(watch-folders): add local/FTP/SFTP watch folder ingest with settings, tasks, tests, docs

2026-03-07 21:06:42 +00:00

setup_wizard.html

feat: update all OpenAI/ChatGPT refs + settings dropdown for fixed-value fields

2026-02-23 20:06:57 +00:00

shared_link_view.html

fix(sharing): address security review findings

2026-03-08 21:55:55 +00:00

shared_links.html

feat(sharing): add document sharing with expiring links

2026-03-08 21:51:30 +00:00

signup.html

feat(auth): enable local user signup without SMTP, add admin user creation

2026-03-07 19:59:10 +00:00

similarity_dashboard.html

fix(similarity): address code review - column-only queries, configurable batch size, WCAG touch targets

2026-03-02 13:39:10 +00:00

status_dashboard.html

feat(release): add named release anchors with codenames and roadmap integration

2026-03-01 18:32:46 +00:00

subscription.html

chore: merge main into branch, resolve conflict in models.py

2026-03-07 20:53:42 +00:00

terms.html

feat: Add build date functionality and enhance documentation pages

2025-04-07 00:05:49 +02:00

upload.html

fix: append new drops to upload queue instead of overwriting it

2026-03-01 13:26:49 +00:00

verify_email_sent.html

feat(auth): add local user signup, email verification, and Stripe billing

2026-03-07 13:15:15 +00:00

version.html

feat: add license page and version display in templates, update LICENSE file, and enhance footer with license information

2025-04-03 22:12:12 +02:00