| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | fix: downloads are marked and keep their extension; Explorer files are refused | Christophe Besson | 14 hours | 1 | -1/+6 |
| * | fix(hub): a stranger who knows your name locks only browsers you never used | Christophe Besson | 14 hours | 4 | -17/+158 |
| * | fix(hub): a group name fits its column and carries no control characters | Christophe Besson | 15 hours | 2 | -4/+25 |
| * | fix(node): how a hosted group admits people is the operator's, not the hub's | Christophe Besson | 16 hours | 1 | -0/+3 |
| * | fix: an identity signs a named kind, and a device approval answers a request | Christophe Besson | 28 hours | 5 | -32/+99 |
| * | fix(hub): the pepper and a device key take the passphrase, not a token | Christophe Besson | 28 hours | 5 | -27/+67 |
| * | feat: browser access, decided in the desktop application | Christophe Besson | 32 hours | 17 | -5/+194 |
| * | feat(client): the desktop application keeps M and every node identity in its ... | Christophe Besson | 33 hours | 19 | -59/+270 |
| * | refactor(hub): the transport holds an identity, never a private key | Christophe Besson | 34 hours | 10 | -96/+87 |
| * | chore: bump version to 0.17.0, and the client minimum with it | Christophe Besson | 34 hours | 2 | -3/+7 |
| * | feat: bundles sealed per node under the passphrase and the hub's pepper | Christophe Besson | 34 hours | 20 | -203/+276 |
| * | feat(hub): a bundle pepper per account, handed only to a proven session | Christophe Besson | 36 hours | 4 | -0/+102 |
| * | fix(hub): a downloaded file opens in a tab only under a type that runs nothing | Christophe Besson | 36 hours | 3 | -20/+56 |
| * | fix: the page connects to its own origin and reCAPTCHA, nowhere else | Christophe Besson | 36 hours | 1 | -1/+7 |
| * | fix(client): the page names node operations, and the app confirms what widens... | Christophe Besson | 37 hours | 16 | -92/+149 |
| * | fix(hub): the admin allow-list grants an account, not a username | Christophe Besson | 37 hours | 4 | -18/+148 |
| * | fix: only the owner decides who hosts a group, and nobody is made a member un... | Christophe Besson | 38 hours | 21 | -33/+731 |
| * | fix: a member can no longer lock a node, crash it with a link, or stop hub cl... | Christophe Besson | 38 hours | 1 | -35/+90 |
| * | feat(hub): search title, description, canonical and noscript in the shell | Christophe Besson | 39 hours | 1 | -3/+30 |
| * | feat(hub): sitemap.xml, named by robots.txt | Christophe Besson | 39 hours | 2 | -0/+22 |
| * | refactor(hub): remove the closed relay registry | Christophe Besson | 3 days | 2 | -168/+0 |
| * | docs: keypair_bundle_delete is reserved for device_policy (O3) | Christophe Besson | 3 days | 1 | -0/+4 |
| * | refactor: drop the unread transfer_limits field from the handshake ack | Christophe Besson | 3 days | 1 | -9/+0 |
| * | feat(client): save files under a name every platform can write | Christophe Besson | 3 days | 15 | -6/+113 |
| * | feat(hub): reports from public-group members, decided by an administrator | Christophe Besson | 3 days | 20 | -71/+745 |
| * | feat: nodes apply the content blocklist in their public groups | Christophe Besson | 3 days | 3 | -36/+72 |
| * | refactor: remove the public-content swarm | Christophe Besson | 3 days | 5 | -131/+40 |
| * | fix: bound pending admin challenges and sign every value an op acts on | Christophe Besson | 3 days | 4 | -15/+62 |
| * | refactor: remove dead code across packages | Christophe Besson | 3 days | 14 | -280/+10 |
| * | fix: refuse an unsigned handshake challenge | Christophe Besson | 3 days | 1 | -25/+16 |
| * | feat(hub): new login tagline, dimmer gradient top | Christophe Besson | 4 days | 11 | -11/+11 |
| * | fix(hub): say so when a lazily loaded view cannot be fetched0.16 | Christophe Besson | 4 days | 13 | -5/+66 |
| * | feat(hub): keep a show's detail modal open under the player | Christophe Besson | 4 days | 4 | -4/+33 |
| * | fix(hub): the sidebar's Node section follows the node link | Christophe Besson | 4 days | 2 | -8/+35 |
| * | fix(hub): say "No operator paired" only when the node says so | Christophe Besson | 4 days | 1 | -4/+12 |
| * | fix: Windows installer and desktop app start and stop the node one way | Christophe Besson | 4 days | 10 | -10/+10 |
| * | fix(hub): rate-limit per client, not per proxy | Christophe Besson | 4 days | 1 | -3/+7 |
| * | fix(node,client): query TMDB only once a language is chosen, in that language | Christophe Besson | 5 days | 1 | -0/+16 |
| * | feat(hub): default email opt-outs and match Register to Login styling | Christophe Besson | 6 days | 3 | -14/+34 |
| * | fix(hub): the NAT-punch signal needs a shared active group, like the offer relay | Christophe Besson | 6 days | 2 | -52/+60 |
| * | feat(protocol): bind the MNP token to the node it is for (E10) | Christophe Besson | 6 days | 6 | -13/+37 |
| * | fix(node,client): survive a transient hub state on login, and surface a faile... | Christophe Besson | 6 days | 1 | -5/+9 |
| * | feat(protocol): MNP 4.0 flag day for the node-audience token (B2) | Christophe Besson | 6 days | 2 | -12/+16 |
| * | fix(hub): present a node-audience token in the handshake, not the hub session... | Christophe Besson | 6 days | 3 | -19/+104 |
| * | fix(hub): require the passphrase to change the e-mail on file | Christophe Besson | 6 days | 2 | -6/+46 |
| * | fix(hub): make group revoke admin-only and route it through the broadcasting ... | Christophe Besson | 6 days | 1 | -0/+42 |
| * | fix(hub): require exp, sub and a known scope when decoding access tokens | Christophe Besson | 6 days | 1 | -2/+26 |
| * | fix(hub): refuse node-scoped tokens on the admin and moderator API | Christophe Besson | 6 days | 1 | -5/+33 |
| * | feat: invitation links no longer bound to an e-mail address | Christophe Besson | 6 days | 16 | -105/+161 |
| * | feat(hub): friendlier welcome page, link previews, robots.txt and favicon | Christophe Besson | 6 days | 18 | -165/+482 |