kolaente 86da987f8a feat(migration): add planka api client ...

Authenticates with an API key, a JWT or username + password (Planka checks
Bearer before X-Api-Key, so only one header is ever sent; downloads use the
accessToken cookie). The synchronous credential check has one 15s deadline and
no retries. Redirects to another host or to plain http are refused for the
api, followed without credentials for attachment downloads. Response bodies
are capped, url userinfo is stripped, pending login steps (totp, terms) and
non-planka endpoints are reported as distinct client errors (142xx).

2026-08-20 08:45:42 +02:00

..

auth

fix(security): reject non-user tokens in GetUserFromClaims

2026-08-04 13:40:11 +02:00

avatar

fix: use caller's session in LoadFileMetaByID to prevent connection pool deadlock

2026-08-16 17:57:52 +02:00

background

fix(unsplash): route api requests through the SSRF-safe http client

2026-07-28 17:26:12 +02:00

dump

fix(dump): reuse single stdin reader for all restore prompts

2026-07-31 20:57:30 +02:00

humabridge

fix(api/v2): don't require read_one for autopatch's internal GET

2026-08-19 13:01:59 +02:00

keyvalue

feat(keyvalue): add PutWithTTL to the storage interface

2026-08-19 17:29:35 +02:00

migration

feat(migration): add planka api client

2026-08-20 08:45:42 +02:00