Maurice 76df44d8de fix(oauth): purge tokens whose refresh token expired a month ago ...

Every refresh writes a new oauth_tokens row and nothing ever deleted the
old ones, so an MCP client refreshing hourly grew the table, and every
backup with it, without end. A nightly job now deletes tokens whose
refresh token expired more than 30 days ago, leaves first, and keeps any
row a live chain still points at for replay detection. Also types the
backup's per-entry store flag.

2026-10-07 16:45:21 +02:00

..

assets

fix(atlas): correct Guangdong Province name in region bundle

2026-09-08 16:36:47 +02:00

eslint-rules

Feat/orm : mikroorm (#2416)

2026-10-06 19:27:30 +02:00

public

v3.0.16 — bug fixes (#964)

2026-05-06 21:38:40 +02:00

scripts

fix(security): refuse an ENCRYPTION_KEY that disagrees with the key file

2026-10-07 15:57:53 +02:00

src

fix(oauth): purge tokens whose refresh token expired a month ago

2026-10-07 16:45:21 +02:00

tests

fix(oauth): purge tokens whose refresh token expired a month ago

2026-10-07 16:45:21 +02:00

.env.example

feat(files): FILE_UPLOAD_LIMIT_MB sets the upload limit for files and notes

2026-10-01 11:56:14 +02:00

.gitignore

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

.prettierrc

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

CLAUDE.md

Feat/orm : mikroorm (#2416)

2026-10-06 19:27:30 +02:00

eslint.config.mjs

fix(server): give the last six outbound fetches a timeout, and lint for it

2026-10-07 16:19:55 +02:00

package.json

fix production deps

2026-10-06 19:43:58 +02:00

reset-admin.js

fix(auth): reset-admin.js ends the account's sessions and matches its email in any case

2026-10-07 16:36:39 +02:00

tsconfig.build.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

tsconfig.json

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

tsconfig.scripts.json

Feat/orm : mikroorm (#2416)

2026-10-06 19:27:30 +02:00

tsconfig.tests.json

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

vitest.config.ts

Feat/orm : mikroorm (#2416)

2026-10-06 19:27:30 +02:00