3 Commits

Include renames

Author	SHA1	Message	Date
bvandeusenandClaude Opus 5.5	3bfddd0862	feat(auth): throttle login, register, password reset and Subsonic auth failures (M462 #4976) ... Every password-shaped check was mounted bare, so guessing was limited only by bcrypt cost. A shared in-memory AttemptLimiter now sits in front of them: - login: 10 failures per account and 50 per address per 15 min, checked before the user lookup and bcrypt; 429 with Retry-After. A success clears the account's count but not the address's. - unknown usernames run a dummy bcrypt compare, so timing no longer says which accounts exist. - register: 10 per address per hour; forgot-password: 5 per address and 3 per email per hour (applied whether or not the email matches); reset: 20 failed tokens per address per 15 min. - Subsonic /rest: same limits as login, counting only wrong credentials, since clients authenticate on every request. Web login, register, reset and forgot-password screens say how long to wait; web and Android carry copy for the rate_limited code. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 08:28:29 -04:00
bvandeusenandClaude Opus 4.7	58766dbebe	fix(server/api): preserve 500-class messages via apierror.InternalMsg ... The PR1-T2 admin handler migration replaced bespoke 500-class messages ("lookup failed", "refetch failed", "trigger failed", "bump failed", "remove failed", "update failed", "schedule row missing", "re-read failed", "read failed") with apierror.Internal(err), which forces the wire Message to "internal server error". That violates the PR1 contract that errEnvelope{Code, Message} must remain byte-identical for existing clients. Add apierror.InternalMsg(message, cause) — a 500-class constructor that preserves the call site's user-facing message while keeping the cause attached for logging and errors.Is. Re-migrate the 12 admin sites whose pre-1cc7eb6 source had a non-empty bespoke Message so they restore the original wire string. Sites whose original Message was empty stay on Internal(err) (humanization to "internal server error" is a tolerable improvement, not a regression). admin_smtp.go's send_failed site (line 129) was already preserved via a raw &apierror.Error literal in 1cc7eb6 and needs no fix. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-07 20:10:18 -04:00
bvandeusen	c919650606	feat(server/apierror): typed Error + sentinels for /api/* envelope	2026-05-07 19:31:02 -04:00