bvandeusen 1e5c8b5ab7 fix(api): trim whitespace from bearer token in logout ...

sessionTokenFromHTTP now matches extractBearerToken's trimming
behavior. Without this, a bearer header with trailing whitespace
(e.g. a buggy client or proxy) authenticates via RequireUser but
hashes the padded value on logout, silently no-oping and leaving
the server-side session alive.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-20 22:32:12 -04:00

..

api

fix(api): trim whitespace from bearer token in logout

2026-04-20 22:32:12 -04:00

auth

feat(api): POST /api/auth/logout

2026-04-20 22:07:16 -04:00

config

test(config): subsonic env override

2026-04-19 17:39:48 +00:00

db

feat(auth): RequireUser middleware (cookie or bearer)

2026-04-20 20:53:11 -04:00

library

feat(library): extract track duration via ffprobe

2026-04-20 08:02:37 -04:00

logging

feat(skel): slog logger factory with text|json format and level parsing

2026-04-18 21:20:10 +00:00

server

feat(server): mount /api/* (login, logout, me)

2026-04-20 22:19:59 -04:00

subsonic

feat(subsonic): getUser + envelope-shaped 404 for /rest/*

2026-04-19 21:56:31 -04:00