bvandeusenandClaude Opus 5.5 46194a609d fix(auth): build password-reset links from an operator-set public address, never the Host header (M462 #4981) ...

buildResetURL used r.Host and r.TLS, so a forgot-password request with a
forged Host emailed the victim a real reset token on a link to the
attacker's server. Links now come only from network_settings.public_url
(migration 0062), and no reset email is sent while it is empty; the response
stays the same opaque 200 and the log says why.

The address is set on a new "Public address" card under Admin → Integrations,
which offers the page's own origin and warns while unset. PUT
/api/admin/network-settings takes either field alone, so the proxy card and
this one can't overwrite each other.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-06 09:32:10 -04:00

..

0001_init.down.sql

M1/#291: placeholder down migration

2026-04-19 01:12:39 +00:00

0001_init.up.sql

M1/#291: placeholder up migration to establish runner

2026-04-19 01:12:37 +00:00

0002_core_library.down.sql

M1/#292: down migration for core library

2026-04-19 02:31:23 +00:00

0002_core_library.up.sql

M1/#292: core library migration (artists/albums/tracks/users)

2026-04-19 02:31:21 +00:00

0003_subsonic_password.down.sql

feat(db): migration 0003 down — drop users.subsonic_password

2026-04-19 17:37:12 +00:00

0003_subsonic_password.up.sql

feat(db): migration 0003 - users.subsonic_password opt-in column

2026-04-19 17:37:11 +00:00

0004_sessions.down.sql

feat(db): add sessions table for /api/* auth

2026-04-20 19:37:26 -04:00

0004_sessions.up.sql

feat(db): add sessions table for /api/* auth

2026-04-20 19:37:26 -04:00

0005_events.down.sql

feat(db): add M2 schema — play_sessions, play_events, skip_events

2026-04-25 20:45:44 -04:00

0005_events.up.sql

feat(db): add M2 schema — play_sessions, play_events, skip_events

2026-04-25 20:45:44 -04:00

0006_likes.down.sql

feat(db): add M2 likes schema (general_likes, _albums, _artists)

2026-04-26 16:20:08 -04:00

0006_likes.up.sql

feat(db): add M2 likes schema (general_likes, _albums, _artists)

2026-04-26 16:20:08 -04:00

0007_contextual_likes.down.sql

feat(db): add contextual_likes table (M3 session-context capture)

2026-04-27 11:13:31 -04:00

0007_contextual_likes.up.sql

feat(db): add contextual_likes table (M3 session-context capture)

2026-04-27 11:13:31 -04:00

0008_scrobble.down.sql

feat(db): add migration 0008 for scrobble (users LB columns + scrobble_queue table)

2026-04-28 08:40:39 -04:00

0008_scrobble.up.sql

feat(db): add migration 0008 for scrobble (users LB columns + scrobble_queue table)

2026-04-28 08:40:39 -04:00

0009_similarity.down.sql

feat(db): add migration 0009 for similarity (track_similarity + artist_similarity)

2026-04-28 19:57:02 -04:00

0009_similarity.up.sql

feat(db): add migration 0009 for similarity (track_similarity + artist_similarity)

2026-04-28 19:57:02 -04:00

0010_lidarr.down.sql

feat(db): add lidarr_config + lidarr_requests schema (migration 0010)

2026-04-29 15:10:01 -04:00

0010_lidarr.up.sql

feat(db): add lidarr_config + lidarr_requests schema (migration 0010)

2026-04-29 15:10:01 -04:00

0011_lidarr_quarantine.down.sql

fix(db): drop redundant quarantine user index + tighten ListQuarantineForUser

2026-04-30 16:54:03 -04:00

0011_lidarr_quarantine.up.sql

fix(db): drop redundant quarantine user index + tighten ListQuarantineForUser

2026-04-30 16:54:03 -04:00

0012_artist_similarity_unmatched.down.sql

feat(db): add artist_similarity_unmatched schema (migration 0012)

2026-05-01 05:50:22 -04:00

0012_artist_similarity_unmatched.up.sql

feat(db): add artist_similarity_unmatched schema (migration 0012)

2026-05-01 05:50:22 -04:00

0013_lidarr_metadata_profile.down.sql

feat(admin): metadata-profile picker on integrations page

2026-05-02 00:09:13 -04:00

0013_lidarr_metadata_profile.up.sql

feat(admin): metadata-profile picker on integrations page

2026-05-02 00:09:13 -04:00

0014_playlists.down.sql

feat(db): playlists schema for M7 #352 slice 1

2026-05-03 10:03:36 -04:00

0014_playlists.up.sql

feat(db): playlists schema for M7 #352 slice 1

2026-05-03 10:03:36 -04:00

0015_system_playlists.down.sql

feat(db/m7-352): system playlists schema (kind, variant, seed_artist_id, runs table)

2026-05-04 08:03:06 -04:00

0015_system_playlists.up.sql

feat(db/m7-352): system playlists schema (kind, variant, seed_artist_id, runs table)

2026-05-04 08:03:06 -04:00

0016_album_cover_source.down.sql

feat(db/m7-353): add albums.cover_art_source enum column

2026-05-04 14:29:13 -04:00

0016_album_cover_source.up.sql

feat(db/m7-353): add albums.cover_art_source enum column

2026-05-04 14:29:13 -04:00

0017_scan_runs.down.sql

feat(db/m7-381): scan_runs table for admin scan-status view

2026-05-04 20:04:04 -04:00

0017_scan_runs.up.sql

feat(db/m7-381): scan_runs table for admin scan-status view

2026-05-04 20:04:04 -04:00

0018_artist_art_and_provider_settings.down.sql

feat(db/m7-cover-sources): migration 0018 — artist art + provider settings

2026-05-06 12:24:36 -04:00

0018_artist_art_and_provider_settings.up.sql

feat(db/m7-cover-sources): migration 0018 — artist art + provider settings

2026-05-06 12:24:36 -04:00

0019_scan_schedule.down.sql

feat(db/m7-recurring-scans): migration 0019 + sqlc queries

2026-05-06 22:12:27 -04:00

0019_scan_schedule.up.sql

feat(db/m7-recurring-scans): migration 0019 + sqlc queries

2026-05-06 22:12:27 -04:00

0020_relax_art_source_checks.down.sql

feat(db/m7-art-providers): migration 0020 + provider-hash queries

2026-05-07 07:39:02 -04:00

0020_relax_art_source_checks.up.sql

feat(db/m7-art-providers): migration 0020 + provider-hash queries

2026-05-07 07:39:02 -04:00

0021_discover_variant.down.sql

feat(db/m7-discover): migration 0021 + bucket queries

2026-05-07 08:31:17 -04:00

0021_discover_variant.up.sql

feat(db/m7-discover): migration 0021 + bucket queries

2026-05-07 08:31:17 -04:00

0022_user_management.down.sql

feat(db/m7-user-mgmt): migration 0022 + audit helper

2026-05-07 11:51:00 -04:00

0022_user_management.up.sql

feat(db/m7-user-mgmt): migration 0022 + audit helper

2026-05-07 11:51:00 -04:00

0023_user_auto_approve.down.sql

feat(db/m7-user-mgmt): migration 0023 + admin-user CRUD queries

2026-05-07 12:12:18 -04:00

0023_user_auto_approve.up.sql

feat(db/m7-user-mgmt): migration 0023 + admin-user CRUD queries

2026-05-07 12:12:18 -04:00

0024_user_management_u3.down.sql

feat(db/m7-user-mgmt): migration 0024 + self-service + SMTP queries (U3)

2026-05-07 12:34:44 -04:00

0024_user_management_u3.up.sql

feat(db/m7-user-mgmt): migration 0024 + self-service + SMTP queries (U3)

2026-05-07 12:34:44 -04:00

0025_library_changes.down.sql

feat(server): library_changes log table + sqlc queries

2026-05-09 22:28:26 -04:00

0025_library_changes.up.sql

feat(server): library_changes log table + sqlc queries

2026-05-09 22:28:26 -04:00

0026_users_timezone.down.sql

feat(users): timezone column + PUT /api/me/timezone

2026-05-13 11:54:45 -04:00

0026_users_timezone.up.sql

feat(users): timezone column + PUT /api/me/timezone

2026-05-13 11:54:45 -04:00

0027_system_playlist_rotation.down.sql

feat(playlists): #415 stage 1 — rotation-state schema + play ingest

2026-05-15 07:40:17 -04:00

0027_system_playlist_rotation.up.sql

feat(playlists): #415 stage 1 — rotation-state schema + play ingest

2026-05-15 07:40:17 -04:00

0028_discovery_mix_variants.down.sql

fix(playlists): allow the 5 discovery-mix variants in DB constraints

2026-05-15 23:39:21 -04:00

0028_discovery_mix_variants.up.sql

fix(playlists): allow the 5 discovery-mix variants in DB constraints

2026-05-15 23:39:21 -04:00

0029_tracks_mbid_nonunique.down.sql

fix(library): extract recording MBID → tracks.mbid; unblock LB similarity

2026-05-16 13:49:38 -04:00

0029_tracks_mbid_nonunique.up.sql

fix(library): extract recording MBID → tracks.mbid; unblock LB similarity

2026-05-16 13:49:38 -04:00

0030_relax_art_source_check_to_nonempty.down.sql

fix: A2 (relax art-source CHECK) + D + E integration residual

2026-05-17 20:22:30 -04:00

0030_relax_art_source_check_to_nonempty.up.sql

fix: A2 (relax art-source CHECK) + D + E integration residual

2026-05-17 20:22:30 -04:00

0031_lidarr_add_confirmed_at.down.sql

fix(player+lidarr): mini-player sync race; durable approve + dedup

2026-05-18 12:24:20 -04:00

0031_lidarr_add_confirmed_at.up.sql

fix(player+lidarr): mini-player sync race; durable approve + dedup

2026-05-18 12:24:20 -04:00

0032_playback_errors.down.sql

feat(server): playback_errors table + admin inbox endpoints

2026-06-02 11:25:50 -04:00

0032_playback_errors.up.sql

feat(server): playback_errors table + admin inbox endpoints

2026-06-02 11:25:50 -04:00

0033_drop_scan_schedule.down.sql

feat(server): retire scan scheduler for watcher + safety-net walk

2026-06-06 21:50:08 -04:00

0033_drop_scan_schedule.up.sql

feat(server): retire scan scheduler for watcher + safety-net walk

2026-06-06 21:50:08 -04:00

0034_you_might_like.down.sql

feat(server): "You might like" album/artist Home rows (#790)

2026-06-11 19:33:46 -04:00

0034_you_might_like.up.sql

feat(server): "You might like" album/artist Home rows (#790)

2026-06-11 19:33:46 -04:00

0035_taste_profile.down.sql

feat(taste): phase 1 — persistent per-user taste profile from graded engagement (#796)

2026-06-11 20:55:14 -04:00

0035_taste_profile.up.sql

feat(taste): phase 1 — persistent per-user taste profile from graded engagement (#796)

2026-06-11 20:55:14 -04:00

0036_diagnostics.down.sql

feat(server/diagnostics): device debug-reporting ingest + admin timeline + retention (M9)

2026-06-29 18:38:56 -04:00

0036_diagnostics.up.sql

feat(server/diagnostics): device debug-reporting ingest + admin timeline + retention (M9)

2026-06-29 18:38:56 -04:00

0037_diagnostics_playback_kind.down.sql

feat(diagnostics): 'playback' kind, newest-first sort, fix active-route subtitle

2026-06-30 16:33:01 -04:00

0037_diagnostics_playback_kind.up.sql

feat(diagnostics): 'playback' kind, newest-first sort, fix active-route subtitle

2026-06-30 16:33:01 -04:00

0038_for_you_pick_kind.down.sql

feat(recommendation): For You exploration attribution — taste vs fresh picks

2026-07-02 20:39:41 -04:00

0038_for_you_pick_kind.up.sql

feat(recommendation): For You exploration attribution — taste vs fresh picks

2026-07-02 20:39:41 -04:00

0039_pick_kind_vocabulary.down.sql

feat(metrics): provenance as standard — pick_kind for all system mixes

2026-07-02 23:26:52 -04:00

0039_pick_kind_vocabulary.up.sql

feat(metrics): provenance as standard — pick_kind for all system mixes

2026-07-02 23:26:52 -04:00

0040_recommendation_tuning.down.sql

feat(tuning): scoring weights → DB-backed admin tuning lab

2026-07-03 09:22:03 -04:00

0040_recommendation_tuning.up.sql

feat(tuning): scoring weights → DB-backed admin tuning lab

2026-07-03 09:22:03 -04:00

0041_discover_taste_unheard.down.sql

feat(discover): taste-targeted novelty bucket + rebalance toward discovery

2026-07-13 18:16:04 -04:00

0041_discover_taste_unheard.up.sql

feat(discover): taste-targeted novelty bucket + rebalance toward discovery

2026-07-13 18:16:04 -04:00

0042_track_tags.down.sql

feat(taste): track_tags schema + enrichment queries (Opt 1 foundation)

2026-07-13 18:46:49 -04:00

0042_track_tags.up.sql

feat(taste): track_tags schema + enrichment queries (Opt 1 foundation)

2026-07-13 18:46:49 -04:00

0043_tag_provider_settings.down.sql

feat(tags): folksonomy tag enricher — pluggable provider chain (#1490 Step 2)

2026-07-13 21:43:58 -04:00

0043_tag_provider_settings.up.sql

feat(tags): folksonomy tag enricher — pluggable provider chain (#1490 Step 2)

2026-07-13 21:43:58 -04:00

0044_taste_tuning_enriched_tag_scale.down.sql

feat(tuning): expose EnrichedTagScale in the tuning lab (#1520)

2026-07-14 07:51:36 -04:00

0044_taste_tuning_enriched_tag_scale.up.sql

feat(tuning): expose EnrichedTagScale in the tuning lab (#1520)

2026-07-14 07:51:36 -04:00

0045_taste_profile_eras.down.sql

feat(taste): era/decade taste facet — #1530

2026-07-14 09:01:00 -04:00

0045_taste_profile_eras.up.sql

feat(taste): era/decade taste facet — #1530

2026-07-14 09:01:00 -04:00

0046_context_time_weight.down.sql

feat(taste): time-of-day / weekday context conditioning — #1531

2026-07-14 09:31:43 -04:00

0046_context_time_weight.up.sql

feat(taste): time-of-day / weekday context conditioning — #1531

2026-07-14 09:31:43 -04:00

0047_taste_profile_moods.down.sql

feat(taste): mood taste facet — #1534

2026-07-14 10:32:41 -04:00

0047_taste_profile_moods.up.sql

feat(taste): mood taste facet — #1534

2026-07-14 10:32:41 -04:00

0048_play_events_device_class.down.sql

feat(taste): device-class context conditioning — #1551

2026-07-14 12:47:59 -04:00

0048_play_events_device_class.up.sql

feat(taste): device-class context conditioning — #1551

2026-07-14 12:47:59 -04:00

0049_suggestion_snoozes.down.sql

feat(discover): time-boxed suggestion snooze, server side — #2374

2026-08-01 22:51:51 -04:00

0049_suggestion_snoozes.up.sql

feat(discover): time-boxed suggestion snooze, server side — #2374

2026-08-01 22:51:51 -04:00

0050_candidate_artist_tags.down.sql

feat(discover): artist-tag cache for out-of-library candidates — #2376

2026-08-02 20:04:15 -04:00

0050_candidate_artist_tags.up.sql

feat(discover): artist-tag cache for out-of-library candidates — #2376

2026-08-02 20:04:15 -04:00

0051_discover_tuning.down.sql

feat(discover): rank suggestions by taste-tag overlap — #2377 (server)

2026-08-02 20:31:12 -04:00

0051_discover_tuning.up.sql

feat(discover): rank suggestions by taste-tag overlap — #2377 (server)

2026-08-02 20:31:12 -04:00

0052_session_ips.down.sql

feat(auth): active sessions API with origin/current IP — #370

2026-08-05 09:17:40 -04:00

0052_session_ips.up.sql

feat(auth): active sessions API with origin/current IP — #370

2026-08-05 09:17:40 -04:00

0053_network_settings.down.sql

feat(net): trusted-proxy depth so real client IPs survive a proxy — #2453

2026-08-05 10:07:43 -04:00

0053_network_settings.up.sql

feat(net): trusted-proxy depth so real client IPs survive a proxy — #2453

2026-08-05 10:07:43 -04:00

0054_track_tag_read_version.down.sql

fix(scanner): read multi-value genre frames correctly — #2499

2026-08-05 21:17:59 -04:00

0054_track_tag_read_version.up.sql

fix(scanner): read multi-value genre frames correctly — #2499

2026-08-05 21:17:59 -04:00

0055_track_missing_since.down.sql

feat(library): detect missing files and stop offering them — #2523

2026-08-06 14:34:53 -04:00

0055_track_missing_since.up.sql

feat(library): detect missing files and stop offering them — #2523

2026-08-06 14:34:53 -04:00

0056_missing_reacquisition.down.sql

feat(library): a missing file asks Lidarr for itself, on a backoff — #2527

2026-08-16 23:53:21 -04:00

0056_missing_reacquisition.up.sql

feat(library): a missing file asks Lidarr for itself, on a backoff — #2527

2026-08-16 23:53:21 -04:00

0057_songs_like_tuning.down.sql

fix(recommendation): Songs-like gets its own profile so it stops wandering

2026-09-10 20:51:15 -04:00

0057_songs_like_tuning.up.sql

fix(recommendation): Songs-like gets its own profile so it stops wandering

2026-09-10 20:51:15 -04:00

0058_track_fingerprints.down.sql

feat(library): fingerprint every new or changed file — M400 #3905-#3907

2026-09-11 13:21:15 -04:00

0058_track_fingerprints.up.sql

feat(library): fingerprint every new or changed file — M400 #3905-#3907

2026-09-11 13:21:15 -04:00

0059_duplicate_groups.down.sql

feat(library): the duplicate sweep — propose duplicate groups from fingerprints (M400 #3910)

2026-09-11 17:00:07 -04:00

0059_duplicate_groups.up.sql

feat(library): the duplicate sweep — propose duplicate groups from fingerprints (M400 #3910)

2026-09-11 17:00:07 -04:00

0060_play_events_track_index.down.sql

feat(admin): the duplicates report — review proposed duplicate groups (M400 #3912)

2026-09-11 17:11:11 -04:00

0060_play_events_track_index.up.sql

feat(admin): the duplicates report — review proposed duplicate groups (M400 #3912)

2026-09-11 17:11:11 -04:00

0061_fingerprint_settings.down.sql

feat(admin): fingerprinting settings — on/off, length, match threshold, concurrency, sweep interval (M400 #3913)

2026-09-11 17:53:55 -04:00

0061_fingerprint_settings.up.sql

feat(admin): fingerprinting settings — on/off, length, match threshold, concurrency, sweep interval (M400 #3913)

2026-09-11 17:53:55 -04:00

0062_network_public_url.down.sql

fix(auth): build password-reset links from an operator-set public address, never the Host header (M462 #4981)

2026-10-06 09:32:10 -04:00

0062_network_public_url.up.sql

fix(auth): build password-reset links from an operator-set public address, never the Host header (M462 #4981)

2026-10-06 09:32:10 -04:00