4 Commits

Include renames

Author	SHA1	Message	Date
DorianandClaude Opus 4.6	1eaf30ae12	fix(app): fix broken dev server after security hardening ... - Fix dev.sh unbound variable crash with ${VITE_DEV_API_TOKEN:-} - Kill stale proxy on startup instead of skipping (token mismatch) - Fix RSS middleware blocking all GET requests (check path before auth) - Read dev auth token lazily from process.env (not cached at import) - Restore network binding (host: true) for Vite dev server - Add macOS keychain lookup for Claude Code OAuth token in proxy - Rewrite proxy streaming to pipe SSE directly instead of await json() - Prevent double web search (client-side + proxy) in useAI - Reduce SearXNG timeout 6s→3s and max tries 8→3 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-06 03:09:06 +00:00
DorianandClaude Opus 4.6	5c4afe00e5	fix(app): add rate limiting to all API endpoints ... Add sliding-window rate limiter in server/dev-auth.ts (60 req/min reads, 10 req/min writes per IP). Apply checkRateLimit() in all Vite plugins and claude-proxy.ts after auth validation. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-06 01:34:41 +00:00
DorianandClaude Opus 4.6	4dc9588c8a	fix(app): replace CORS Access-Control-Allow-Origin * with explicit localhost origin ... Add setCorsHeaders() and handleCorsOptions() helpers in server/dev-auth.ts. Replace wildcard CORS origin with http://localhost:5173 in all Vite plugins and claude-proxy.ts. Include Authorization in allowed CORS headers. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-06 01:25:10 +00:00
DorianandClaude Opus 4.6	cc7d9fc19e	fix(app): add dev server auth token to all API endpoints ... Generate random VITE_DEV_API_TOKEN in dev.sh, validate Bearer token in shared server/dev-auth.ts middleware. Applied to all Vite plugins (fs, dev-chats, rss, web-search, tmdb, music-search) and claude-proxy. Client-side uses apiFetch() wrapper to attach the token automatically. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-06 01:23:17 +00:00