Frédéric Guillot 76889f08b1 fix(auth): enforce DISABLE_LOCAL_AUTH on the API and password changes ...

The setting only blocked the web login form. The REST API still accepted
the account password over Basic Authentication, and passwords could still
be changed through the API and the settings page.

Reject Basic Authentication and password modifications when local auth
is disabled. API clients must use an API key instead.

2026-09-11 19:28:21 -07:00

..

api_integration_test.go

fix: avoid panic when creating a feed without any category

2026-08-23 14:57:52 -07:00

api_key_handlers.go

fix(response): 204 responses should not include the Content-Type header

2026-03-18 20:12:31 -07:00

api_test.go

fix(auth): enforce DISABLE_LOCAL_AUTH on the API and password changes

2026-09-11 19:28:21 -07:00

api.go

feat(api): Allow API client to set "starred" to true or false using the "PUT /v1/entries" endpoint

2026-06-19 17:47:32 -07:00

category_handlers.go

refactor: change existence-check helpers to return (bool, error)

2026-08-05 21:43:17 +02:00

enclosure_handlers.go

fix(storage): scope enclosure lookup by user

2026-06-14 21:27:47 -07:00

entry_handlers.go

refactor: change existence-check helpers to return (bool, error)

2026-08-05 21:43:17 +02:00

feed_handlers.go

fix: avoid panic when creating a feed without any category

2026-08-23 14:57:52 -07:00

icon_handlers.go

fix(api): scope icon lookup by user in icons endpoint

2026-07-19 20:26:49 -07:00

messages.go

refactor(api): move entryIDsResponse struct to messages.go

2026-06-22 15:58:43 -07:00

middleware.go

fix(auth): enforce DISABLE_LOCAL_AUTH on the API and password changes

2026-09-11 19:28:21 -07:00

opml_handlers.go

fix: avoid panic when creating a feed without any category

2026-08-23 14:57:52 -07:00

subscription_handlers.go

refactor(fetcher): make request builder actually build

2026-06-12 21:20:53 -07:00

user_handlers.go

fix(api): return server error on user lookup failure

2026-06-22 15:14:25 -07:00

version_handler.go

refactor(api): rename API handlers for consistency

2026-03-18 17:20:42 -07:00