Ralksta 3bbec5a4ac 🛡️ Sentinel: [CRITICAL/HIGH] Upgrade token encryption to AES-GCM (#117) ...

Upgraded `encodeAssetId` and `decodeAssetId` to use `aes-256-gcm` (Authenticated Encryption) instead of `aes-256-cbc`.
AES-CBC lacks authentication, leaving it potentially susceptible to padding oracle attacks or ciphertext manipulation.
The new token adds a `v2:` prefix which strictly enforces AES-GCM while supporting legacy fallback for cached urls.

Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>

2026-04-21 22:51:39 +02:00

..

__tests__

🛡️ Sentinel: [CRITICAL/HIGH] Upgrade token encryption to AES-GCM (#117)

2026-04-21 22:51:39 +02:00

config

⚡ Bolt: Cache parsed YAML to prevent repetitive synchronous file I/O (#91)

2026-04-21 22:51:22 +02:00

auth.ts

feat: implement album-level password protection

2026-04-07 23:04:03 +02:00

cache.ts

perf: implement proper LRU Cache and ETag optimizations

2026-03-27 11:11:23 +01:00

env.ts

chore: clean up repo root and improve .gitignore

2026-03-13 11:34:28 +01:00

immich.ts

perf: add promise deduplication for getAssetInfo (#134)

2026-04-21 22:51:15 +02:00

immichLoader.ts

feat: visual polish & UX — fade-in, theme toggle, scroll-to-top, footer, cursor, badge

2026-02-14 11:47:26 +01:00

mapService.ts

🛡️ Sentinel: [HIGH] Fix missing rate limiting on /api/exif/[id]

2026-03-12 11:30:45 +00:00

rate-limit.ts

Fix IP spoofing vulnerability in rate limiter by prioritizing request.ip (#132)

2026-04-21 22:51:35 +02:00

thumbhash.ts

perf: return Buffer directly instead of wrapping in Uint8Array (#131)

2026-04-21 22:51:19 +02:00

tokens.ts

🛡️ Sentinel: [CRITICAL/HIGH] Upgrade token encryption to AES-GCM (#117)

2026-04-21 22:51:39 +02:00

urls.ts

feat: visual polish & UX — fade-in, theme toggle, scroll-to-top, footer, cursor, badge

2026-02-14 11:47:26 +01:00