Issues

• add documentation for installing and running JSS in a Podman container

  JavaScriptSolidServer/JavaScriptSolidServer#649 · opened on Nov 9, 2026

• Nostr relay: add size limits (and optional write auth and persistence), in line with strfry and others

  JavaScriptSolidServer/JavaScriptSolidServer#648 · opened on Nov 8, 2026

• Notifications only reach subscribers on the hostname used for the write

  JavaScriptSolidServer/JavaScriptSolidServer#647 · opened on Nov 7, 2026

• Plugin loader: one plugin's activate() failure crash-loops the whole server; isolate and retry instead

  JavaScriptSolidServer/JavaScriptSolidServer#645 · opened on Nov 6, 2026

• plugin api: api.headers.link() — plugins add Link relations to every LDP response

  JavaScriptSolidServer/JavaScriptSolidServer#625 · opened on Oct 14, 2026

• plugin api: api.wac.registerReader() — plugins can add (never remove) permissions

  JavaScriptSolidServer/JavaScriptSolidServer#624 · opened on Oct 14, 2026
  1

• plugin api: api.auth.registerVerifier() — plugin-issued credentials accepted on pod resources

  JavaScriptSolidServer/JavaScriptSolidServer#622 · opened on Oct 14, 2026

• Track: LWS protocol conformance (Oct 2026 drafts) — core vs plugin split, Touchstone as acceptance test

  JavaScriptSolidServer/JavaScriptSolidServer#621 · opened on Oct 14, 2026
  8

• Plugin metadata: let plugins declare name, description, and required config (export const meta)

  JavaScriptSolidServer/JavaScriptSolidServer#615 · opened on Jul 12, 2026

• Plugin id derivation defeats the pod/plugin.js convention — every app derives id "pod"

  JavaScriptSolidServer/JavaScriptSolidServer#614 · opened on Jul 12, 2026

• idp: issuer required before listen — rules out port-0 ephemeral-port composition tests

  JavaScriptSolidServer/JavaScriptSolidServer#609 · opened on Jul 11, 2026

• idp: createAccount without a webId poisons the WebID index — second webId-less account collides

  JavaScriptSolidServer/JavaScriptSolidServer#608 · opened on Jul 11, 2026

• Plugin API seam: shared discovery documents — a link/JRD registry (api.webfinger.addLink)

  JavaScriptSolidServer/JavaScriptSolidServer#606 · opened on Jul 11, 2026

• Plugin API seam: api.authorize — ask the host's WAC about authority the requester doesn't drive

  JavaScriptSolidServer/JavaScriptSolidServer#604 · opened on Jul 11, 2026

• Plugin API seam: api.events.onResourceChange — a plugin can't react to pod writes

  JavaScriptSolidServer/JavaScriptSolidServer#603 · opened on Jul 11, 2026
  1

• Plugin loader: activate() failure wrap drops err.code — FST_ERR_DUPLICATED_ROUTE only identifiable by string-matching

  JavaScriptSolidServer/JavaScriptSolidServer#599 · opened on Jul 11, 2026

• logger: false silently disables every plugin onResponse hook (access-log hook throws on the null logger)

  JavaScriptSolidServer/JavaScriptSolidServer#598 · opened on Jul 11, 2026

• Plugin loader: dotted prefixes (/.foo) silently break the WebSocket upgrade — validate or document

  JavaScriptSolidServer/JavaScriptSolidServer#597 · opened on Jul 11, 2026

• idp: token refresh for the programmatic flow — POST /idp/refresh

  JavaScriptSolidServer/JavaScriptSolidServer#587 · opened on Jul 10, 2026

• appPaths: WAC-hook exemption for application mount points (plugin seam from #206)

  JavaScriptSolidServer/JavaScriptSolidServer#582 · opened on Jul 10, 2026

• RFC: a did:nostr resolver/indexer mode built on buildDidDocument + the Mongo store

  JavaScriptSolidServer/JavaScriptSolidServer#572 · opened on Jun 15, 2026

• /private/privkey.jsonld uses external cid/v1 @context, inconsistent with profile.js (inline) and not conneg-expandable

  JavaScriptSolidServer/JavaScriptSolidServer#570 · opened on Jun 15, 2026
  2

• tunnel: 10MB MAX_MESSAGE_SIZE cap is inconsistent with the 20MB body-limit default and ignores base64 framing overhead

  JavaScriptSolidServer/JavaScriptSolidServer#567 · opened on Jun 15, 2026
  1

• Migrate optional features to the plugin system; define the core/plugin line

  JavaScriptSolidServer/JavaScriptSolidServer#564 · opened on Jun 11, 2026

• jss install reports '0/N installed' when the push actually extracted and the app serves

  JavaScriptSolidServer/JavaScriptSolidServer#560 · opened on Jun 11, 2026
  1