Commit Graph

10 Commits

Author SHA1 Message Date
Devin Zuczek 7abef376b6 [storage] upload hardening 2026-10-21 22:50:07 -04:00
Crasho 26270e9c25 [studio] beta studio (#114)
* rrs stuff

* studio service yay

* rrs whitelist

* moree studiooooooo fellowwww

* rec room studio room loading yay

* fixes yay

* fix 2 because idk  yayuh

* Update cdn.app.ts

* ccontent length fix?

* Preserve content-length and upgrade metadata

Return a real zero-filled byte array for CDN HEAD responses so the runtime preserves Content-Length while still sending no payload. In notify, re-create the Request with its original headers, set OWNER_HEADER from the validated token, and forward that Request to hub.fetch to avoid losing WebSocket upgrade metadata (which could trigger 500s in Durable Objects). These changes ensure the editor's size checks and WebSocket upgrades remain reliable.

* fix x524234

* shirt thing?

* [auth] remove grant table as we already have audit_log for now

* rename table to generic device_grant

* cleanup/lint

---------

Co-authored-by: Devin Zuczek <devin.zuczek@gmail.com>
2026-10-05 14:39:22 -04:00
Devin Zuczek ab15eb9768 [www] flag to disable websignups 2026-09-27 23:02:42 -04:00
Nexi 222547ee13 [api] audit fixes: account tests, dependencies and security hardening (#54)
* test(accounts): cover three username changes

* chore(deps): update vulnerable runtime dependencies

* fix(security): bound uploads and validate token subjects strictly

---------

Co-authored-by: Nexi (CWN) <communityshieldofficial@gmail.com>
2026-09-08 23:47:58 -04:00
Devin Zuczek 30cf83a47d [img] missing r2 libs 2026-08-10 14:10:02 -04:00
Devin Zuczek b82a5e1dc0 add some basic validation 2026-08-05 14:00:31 -04:00
Devin Zuczek 68b98665b2 update api docs 2026-07-22 10:12:50 -04:00
Devin Zuczek 3e8f66b620 add game config configuration 2026-07-14 18:01:10 -04:00
Devin Zuczek c9ec13fc6c update deps 2026-06-29 23:44:57 -04:00
Devin Zuczek 8e644a5c20 Initial commit 2026-06-08 18:23:40 -04:00