Siddharth Kumar Sah 432cc92471 feat: harden auth, security headers, SVG sanitization, and pipeline ownership ...

- Add password strength validation (8+ chars, uppercase, lowercase, number)
- Add username validation rules
- Optimize API key lookup with SHA-256 prefix (O(1) vs O(n) scan)
- Require password change on default admin first login
- Revoke API keys on password change
- Add session cleanup cron (hourly expired session purge)
- Add Permissions-Policy, HSTS, and CSP security headers in production
- Strengthen SVG sanitizer: block XInclude, foreignObject, processing
  instructions, javascript/data/file URI schemes
- Add userId ownership to pipelines with authorization checks
- Add keyPrefix column to api_keys table
- Update integration tests for new auth behavior

2026-03-24 21:38:06 +08:00

..

barcode-read.ts

chore: remove dead code, add test infrastructure, update docs

2026-03-23 11:46:45 +08:00

blur-faces.ts

chore: remove dead code, add test infrastructure, update docs

2026-03-23 11:46:45 +08:00

border.ts

feat: production Docker, Playwright tests, settings API, and bug fixes

2026-03-22 19:28:57 +08:00

bulk-rename.ts

chore: remove swagger deps, parallelize CI jobs

2026-03-24 00:41:54 +08:00

collage.ts

chore: remove dead code, add test infrastructure, update docs

2026-03-23 11:46:45 +08:00

color-adjustments.ts

feat(api): add resize, crop, rotate, convert, compress, metadata, and color tool routes

2026-03-22 03:56:34 +08:00

color-palette.ts

feat: add utility tools (image info, compare, duplicates, color palette, QR, barcode)

2026-03-22 04:20:35 +08:00

compare.ts

feat: add utility tools (image info, compare, duplicates, color palette, QR, barcode)

2026-03-22 04:20:35 +08:00

compose.ts

chore: remove dead code, add test infrastructure, update docs

2026-03-23 11:46:45 +08:00

compress.ts

feat(api): add resize, crop, rotate, convert, compress, metadata, and color tool routes

2026-03-22 03:56:34 +08:00

convert.ts

feat(api): add resize, crop, rotate, convert, compress, metadata, and color tool routes

2026-03-22 03:56:34 +08:00

crop.ts

feat(api): add resize, crop, rotate, convert, compress, metadata, and color tool routes

2026-03-22 03:56:34 +08:00

erase-object.ts

chore: remove dead code, add test infrastructure, update docs

2026-03-23 11:46:45 +08:00

favicon.ts

chore: remove swagger deps, parallelize CI jobs

2026-03-24 00:41:54 +08:00

find-duplicates.ts

feat: add utility tools (image info, compare, duplicates, color palette, QR, barcode)

2026-03-22 04:20:35 +08:00

gif-tools.ts

feat: add format tools (SVG-to-raster, vectorize, GIF) and optimization (rename, favicon, image-to-PDF)

2026-03-22 04:20:54 +08:00

image-to-pdf.ts

feat: add format tools (SVG-to-raster, vectorize, GIF) and optimization (rename, favicon, image-to-PDF)

2026-03-22 04:20:54 +08:00

index.ts

feat: add Phase 4 AI tools with Python bridge and 6 new tools

2026-03-22 04:31:49 +08:00

info.ts

feat: add utility tools (image info, compare, duplicates, color palette, QR, barcode)

2026-03-22 04:20:35 +08:00

ocr.ts

chore: remove dead code, add test infrastructure, update docs

2026-03-23 11:46:45 +08:00

qr-generate.ts

feat: add utility tools (image info, compare, duplicates, color palette, QR, barcode)

2026-03-22 04:20:35 +08:00

remove-background.ts

chore: remove dead code, add test infrastructure, update docs

2026-03-23 11:46:45 +08:00

replace-color.ts

feat: add replace-color tool and update tool page routing

2026-03-22 04:21:10 +08:00

resize.ts

feat(api): add resize, crop, rotate, convert, compress, metadata, and color tool routes

2026-03-22 03:56:34 +08:00

rotate.ts

feat(api): add resize, crop, rotate, convert, compress, metadata, and color tool routes

2026-03-22 03:56:34 +08:00

smart-crop.ts

feat: add Phase 4 AI tools with Python bridge and 6 new tools

2026-03-22 04:31:49 +08:00

split.ts

chore: remove swagger deps, parallelize CI jobs

2026-03-24 00:41:54 +08:00

strip-metadata.ts

fix: white screen crash when uploading photos with null GPS EXIF data

2026-03-23 19:22:52 +08:00

svg-to-raster.ts

feat: harden auth, security headers, SVG sanitization, and pipeline ownership

2026-03-24 21:38:06 +08:00

text-overlay.ts

feat: add watermark, text overlay, and image composition tools

2026-03-22 04:20:26 +08:00

upscale.ts

chore: remove dead code, add test infrastructure, update docs

2026-03-23 11:46:45 +08:00

vectorize.ts

feat: add format tools (SVG-to-raster, vectorize, GIF) and optimization (rename, favicon, image-to-PDF)

2026-03-22 04:20:54 +08:00

watermark-image.ts

chore: remove dead code, add test infrastructure, update docs

2026-03-23 11:46:45 +08:00

watermark-text.ts

chore: remove dead code, add test infrastructure, update docs

2026-03-23 11:46:45 +08:00