Mirrors/photoprism
1
0
Fork 0
mirror of https://github.com/photoprism/photoprism.git synced 2026-07-24 02:29:10 +00:00
Code Issues Projects Releases Wiki Activity
13452 commits 31 branches 82 tags 462 MiB
Commit graph

22 commits

Author SHA1 Message Date
Michael Mayer
c45ee6e54f Auth: Revoke derived sessions & gate app passwords by login state #5647 
- Add scoped session revocation (RevokeSessions / RevokeDerivedSessions)
  shared by the user-update API and the CLI: a privilege-level change now
  revokes logins and app-password-derived sessions while keeping the app
  passwords themselves, so configured devices keep working.
- Identify app-password-derived sessions by auth_method "session".
- Deny app passwords on the REST API when the account cannot log in
  (DenyLogIn); WebDAV access stays governed by CanUseWebDAV.
- Reduce the WebDAV auth cache expiration to one minute.
- Add IsSystemOrInvalid; allow deleting the initial admin account and skip
  re-initializing a deactivated or deleted admin in InitAccount.
- Move session-revocation scopes to pkg/authn and extend tests.
 2026-06-15 23:41:01 +00:00
Michael Mayer
290d1a13e0 API: Improve user profile authorization checks and code comments #5619 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2026-05-26 22:10:58 +02:00
Michael Mayer
9219d14d3f API: Export request limit helpers and align test guidance 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2026-03-08 13:49:50 +01:00
Michael Mayer
4eac10c9d1 API: Apply "golangci-lint" recommendations #5330 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2025-11-22 09:25:01 +01:00
Michael Mayer
cd7fa6adca Logs: Add package pkg/log/status to provide generic outcome constants 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2025-10-21 14:42:05 +02:00
Michael Mayer
ce304abd2c API: Update endpoints to return HTTP 201 when a new resource was created 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2025-10-20 16:46:59 +02:00
Michael Mayer
a921f82a17 Pkg: Move /service/http/... to /http/... and add package /http/dns 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2025-10-19 21:08:48 +02:00
Michael Mayer
578fbe4d10 API: Add missing Swagger endpoint annotations and update swagger.json 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2025-09-22 04:12:02 +02:00
Michael Mayer
887a39e7d9 Auth: Add "node" and "portal" roles, refactor session entity #98 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2025-09-18 13:33:18 +02:00
Michael Mayer
023fbe3a1d Pkg: Add service/cluster package & rename media/http → service/http #98 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2025-09-13 12:58:28 +02:00
Michael Mayer
6a89519e63 Videos: Refactor codec, content and file type specifications #4770 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2025-02-05 00:30:45 +01:00
Michael Mayer
1f4f65e988 Server: Add "force" and "mode" flags for sockets #4673 #4767 #4765 #4467 
These changes allow you to force the re-creation of existing Unix domain
sockets and set the permissions of sockets after they have been created.

The flag or variable value for this must be formatted as follows:
--http-host="unix:/var/run/photoprism.sock?force=true&mode=660"

Signed-off-by: Michael Mayer <michael@photoprism.app>
 2025-02-04 12:03:00 +01:00
Michael Mayer
428d57e71e API: Add Swagger annotations #2132 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2024-07-16 12:05:55 +02:00
Michael Mayer
9969590472 Account: Allow OIDC and LDAP users with password to use 2FA #782 #808 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2024-07-10 17:24:02 +02:00
Michael Mayer
e5bbff4020 Backend: Move get package to /internal/photoprism/get 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2024-07-02 08:03:30 +02:00
Michael Mayer
a97f8d0795 API: Implement OIDC redirect endpoint #782 
Requires further testing and refinement before it can be released.

Signed-off-by: Michael Mayer <michael@photoprism.app>
 2024-07-01 16:50:53 +02:00
Michael Mayer
13255695e5 Albums: Remove photo from review when adding it to an album #4229 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2024-05-09 16:00:53 +02:00
Michael Mayer
33fac8f404 API: Implement creation and revocation of app passwords #808 #4114 
Note that these changes are not production ready yet and must be tested
well before releasing them.

Signed-off-by: Michael Mayer <michael@photoprism.app>
 2024-04-07 16:44:30 +02:00
Michael Mayer
fdc2062d33 Account: Refactor access token API and request forms #808 #4114 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2024-04-05 14:46:11 +02:00
Michael Mayer
2185618910 API: Refactor authentication failure rate limit #808 #3943 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2024-04-04 11:18:05 +02:00
Michael Mayer
31d1f06ffa Security: Refactor rate limits for failed authentication request #808 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2024-03-31 14:45:17 +02:00
Michael Mayer
4425becb3d Auth: Implement 2FA setup and login in the web user interface #808 #3943 
Signed-off-by: Michael Mayer <michael@photoprism.app>
 2024-03-21 14:32:51 +01:00