Commit history

1. Commits on Mar 10, 2026

   • Consume auth code before validation, rate limit token endpoint

     Show description for 69225fa
     melvincarvalho

     committed
     69225faView commit details

     Copy full SHA for 69225fa

     View code at this pointBrowse repository at this point

   • Add state parameter, timing-safe comparison, rate limiting

     Show description for 62665aa
     melvincarvalho

     committed
     62665aaView commit details

     Copy full SHA for 62665aa

     View code at this pointBrowse repository at this point

   • Harden OAuth flow: validate client credentials and redirect_uri

     Show description for ea83906
     melvincarvalho

     committed
     ea83906View commit details

     Copy full SHA for ea83906

     View code at this pointBrowse repository at this point

   • Add OAuth 2.0 authorize/token flow

     Show description for 8b5e2a5
     melvincarvalho

     committed
     8b5e2a5View commit details

     Copy full SHA for 8b5e2a5

     View code at this pointBrowse repository at this point

   • Restrict auth skip to exact Mastodon API paths

     Show description for 1066da2
     melvincarvalho

     committed
     1066da2View commit details

     Copy full SHA for 1066da2

     View code at this pointBrowse repository at this point

   • Fix Mastodon API endpoints for real client compatibility

     Show description for e380f74
     melvincarvalho

     committed
     e380f74View commit details

     Copy full SHA for e380f74

     View code at this pointBrowse repository at this point

   • Add Mastodon-compatible API endpoints (Step 1)

     Show description for 785473d
     melvincarvalho

     committed
     785473dView commit details

     Copy full SHA for 785473d

     View code at this pointBrowse repository at this point
2. Commits on Mar 4, 2026

   • fix: skip /db/ ownership check in single-user mode

     Show description for ecf1454
     melvincarvalho

     committed
     ecf1454View commit details

     Copy full SHA for ecf1454

     View code at this pointBrowse repository at this point

   • fix: address Copilot review comments on /db/ route

     Show description for d9f9b25
     melvincarvalho

     committed
     d9f9b25View commit details

     Copy full SHA for d9f9b25

     View code at this pointBrowse repository at this point

   • feat: add /db/ route backed by MongoDB

     Show description for 0e07981
     melvincarvalho

     committed
     0e07981View commit details

     Copy full SHA for 0e07981

     View code at this pointBrowse repository at this point
3. Commits on Mar 3, 2026

   • Merge pull request #146 from JavaScriptSolidServer/issue-142-passkey-skip-invalid-state

     Show description for 396ee7e
     melvincarvalho

     authored
     396ee7eView commit details

     Copy full SHA for 396ee7e

     View code at this pointBrowse repository at this point

   • Merge pull request #147 from JavaScriptSolidServer/issue-143-handleunauthorized-mashlib-module

     Show description for 30368e7
     melvincarvalho

     authored
     30368e7View commit details

     Copy full SHA for 30368e7

     View code at this pointBrowse repository at this point

   • fix: skip dotfile paths and handle pod-root in subdomain URL normalization

     Show description for ec4cf5b
     melvincarvalho

     committed
     ec4cf5bView commit details

     Copy full SHA for ec4cf5b

     View code at this pointBrowse repository at this point

   • Fix handleUnauthorized serving old mashlib when mashlibModule configured

     Show description for 9e5f535
     melvincarvalho

     committed
     9e5f535View commit details

     Copy full SHA for 9e5f535

     View code at this pointBrowse repository at this point

   • Fix passkey skip 'Invalid state' error

     Show description for 3f5720f
     melvincarvalho

     committed
     3f5720fView commit details

     Copy full SHA for 3f5720f

     View code at this pointBrowse repository at this point

   • Fix WAC 403 for path-based pod access when subdomains enabled

     Show description for 59118a9
     melvincarvalho

     committed
     59118a9View commit details

     Copy full SHA for 59118a9

     View code at this pointBrowse repository at this point
4. Commits on Mar 1, 2026

   • Add --mashlib-module flag for ES module data browser

     Show description for cd3079c
     melvincarvalho

     committed
     cd3079cView commit details

     Copy full SHA for cd3079c

     View code at this pointBrowse repository at this point
5. Commits on Feb 28, 2026

   • Fix: handle ECONNRESET gracefully instead of crashing

     Show description for 510b7ef
     melvincarvalho

     committed
     510b7efView commit details

     Copy full SHA for 510b7ef

     View code at this pointBrowse repository at this point
6. Commits on Feb 26, 2026

   • Fix: use Object.create proxy for Fastify read-only request.url

     melvincarvalho

     committed
     c9856baView commit details

     Copy full SHA for c9856ba

     View code at this pointBrowse repository at this point

   • Route PUT text/html to index.html for existing containers

     Show description for 21c51f2
     melvincarvalho

     committed
     21c51f2View commit details

     Copy full SHA for 21c51f2

     View code at this pointBrowse repository at this point
7. Commits on Feb 24, 2026

   • Fix remoteAddress: use flat log fields to avoid Pino req/res serializer override

     melvincarvalho

     committed
     606e472View commit details

     Copy full SHA for 606e472

     View code at this pointBrowse repository at this point

   • Fix missing remoteAddress: fall back to X-Forwarded-For and socket address

     melvincarvalho

     committed
     1e6cebaView commit details

     Copy full SHA for 1e6ceba

     View code at this pointBrowse repository at this point

   • Add --log-level flag and single structured access log line (#130)

     Show description for 8baab4f
     melvincarvalho

     authored
     8baab4fView commit details

     Copy full SHA for 8baab4f

     View code at this pointBrowse repository at this point

   • Merge pull request #65 from JavaScriptSolidServer/fix-relative-agent-uri

     Show description for 6e0e089
     melvincarvalho

     authored
     6e0e089View commit details

     Copy full SHA for 6e0e089

     View code at this pointBrowse repository at this point

   • Auto-enable conneg when mashlib is enabled

     Show description for 3534705
     melvincarvalho

     committed
     3534705View commit details

     Copy full SHA for 3534705

     View code at this pointBrowse repository at this point
8. Commits on Jan 28, 2026

   • fix: WebSocket subscriptions now work in public mode

     Show description for f70cbd0
     melvincarvalho

     committed
     f70cbd0View commit details

     Copy full SHA for f70cbd0

     View code at this pointBrowse repository at this point

   • feat: add filesystem watcher for live reload

     Show description for f1d6dac
     melvincarvalho

     committed
     f1d6dacView commit details

     Copy full SHA for f1d6dac

     View code at this pointBrowse repository at this point

   • feat: add --live-reload flag for auto-refresh on file changes (#111)

     Show description for e80ff35
     melvincarvalho

     authored
     e80ff35View commit details

     Copy full SHA for e80ff35

     View code at this pointBrowse repository at this point

   • fix: skip quota checks in public mode

     Show description for 08efa05
     melvincarvalho

     committed
     08efa05View commit details

     Copy full SHA for 08efa05

     View code at this pointBrowse repository at this point

   • feat: add --public and --read-only flags for open access mode (#109)

     Show description for a0466f4
     melvincarvalho

     authored
     a0466f4View commit details

     Copy full SHA for a0466f4

     View code at this pointBrowse repository at this point
9. Commits on Jan 16, 2026

   • fix: replace better-sqlite3 with sql.js for cross-platform compatibility (#93)

     Show description for 06c7a20
     melvincarvalho

     authored
     06c7a20View commit details

     Copy full SHA for 06c7a20

     View code at this pointBrowse repository at this point

   • fix: replace bcrypt with bcryptjs for cross-platform compatibility (#91)

     Show description for dba7186
     melvincarvalho

     authored
     dba7186View commit details

     Copy full SHA for dba7186

     View code at this pointBrowse repository at this point
10. Commits on Jan 12, 2026

    • feat: Add single-user mode for personal pod servers (#77)

      Show description for a245fe4
      melvincarvalho

      committed
      a245fe4View commit details

      Copy full SHA for a245fe4

      View code at this pointBrowse repository at this point
11. Commits on Jan 11, 2026

    • Address review feedback on Schnorr SSO

      Show description for 8e4b246
      melvincarvalho

      committed
      8e4b246View commit details

      Copy full SHA for 8e4b246

      View code at this pointBrowse repository at this point

    • Add Schnorr SSO login button

      Show description for 1b16f3b
      melvincarvalho

      committed
      1b16f3bView commit details

      Copy full SHA for 1b16f3b

      View code at this pointBrowse repository at this point