Feat/keys fresh-implement secure embed authorization - #116

Merged

Yashb404 merged 68 commits into

mainfrom

feat/keys-fresh

Feb 12, 2026

Commits on Feb 10, 2026

middle
Yashb404
committed
e402156
Rewrite project.rs
Yashb404
committed
f7cb3e6
Enhance EmbedModal and ViewPage components to support VIP links and whitelisting functionality. Update project handler to ensure VIP keys are generated for project owners and include embed_key in p…
Yashb404
committed
f973039

Commits on Feb 11, 2026

Initial plan
Copilot
committed
c777433
Update client/src/components/modal.rs

Yashb404
and
Copilot
authored
9dca279
Initial plan
Copilot
committed
5d48617
Update client/src/pages/embed.rs

Yashb404
and
Copilot
authored
373a5cb
Initial plan
Copilot
committed
15b0a71
Initial plan
Copilot
committed
35b4365
Initial plan
Copilot
committed
de4acb3
Initial plan
Copilot
committed
7d337df
Implement URL normalization for Referer header validation to prevent security bypasses

Copilot
and
Yashb404
committed
3c3c96d
Initial plan
Copilot
committed
dbf9c7a
Update client/src/components/modal.rs

Yashb404
and
Copilot
authored
5f6574f
Improve error handling for whitelist add/remove operations

Copilot
and
Yashb404
committed
d870e3b
Enhance URL normalization security: restrict to http/https, require valid hosts

Copilot
and
Yashb404
committed
1f36148
Fix resize divider memory leak by adding mounted signal guard

Copilot
and
Yashb404
committed
9c3bd6e
Fix race condition by setting mounted flag before scheduling callback

Copilot
and
Yashb404
committed
c361986
Improve code readability by destructuring mounted signal

Copilot
and
Yashb404
committed
5f08671
Generate embed_key at project creation time in publish_handler

Copilot
and
Yashb404
committed
127525c
Use console::error_1 instead of console::log_1 for error messages

Copilot
and
Yashb404
committed
beca6bd
Add logging and improve error messages for URL validation

Copilot
and
Yashb404
committed
ad406be
Merge pull request #117 from TryCli-Studio/copilot/sub-pr-116
Yashb404
authored
4e25442
Add VIP key query parameter support to embed pages

Copilot
and
Yashb404
committed
f32a538
Merge pull request #118 from TryCli-Studio/copilot/sub-pr-116-again
Yashb404
authored
f8cd379
Merge pull request #119 from TryCli-Studio/copilot/sub-pr-116-another-one
Yashb404
authored
fb51be2
Show helpful loading message when VIP link is unavailable

Copilot
and
Yashb404
committed
350dd58
Merge pull request #120 from TryCli-Studio/copilot/sub-pr-116-yet-again
Yashb404
authored
b87746a
Run cargo fmt to fix formatting

Copilot
and
Yashb404
committed
3e820db
Add rate limiting and max entries limit for whitelist endpoints

Copilot
and
Yashb404
committed
23f1ad6
Initial plan
Copilot
committed
a36cd10
Initial plan
Copilot
committed
26b847f
Update server/migrations/20260210000000_secure_embed_schema.up.sql

Yashb404
and
Copilot
authored
7ba4492
Initial plan
Copilot
committed
dc3c3bc
Initial plan
Copilot
committed
f190fee
Address code review feedback: fix race condition and improve code quality

Copilot
and
Yashb404
committed
be66fb4
Fix race condition using PostgreSQL advisory locks in transaction

Copilot
and
Yashb404
committed
fdb09a3
Update server/src/handlers/project.rs

Yashb404
and
Copilot
authored
d8023cd
Address final code review comments

Copilot
and
Yashb404
committed
8298271
Fix whitelist fetch to only execute for project owners

Copilot
and
Yashb404
committed
08f4e6a
Implement CSRF protection for whitelist management endpoints

Copilot
and
Yashb404
committed
f4f10ac
Implement separate endpoint for embed_key retrieval to prevent exposure

Copilot
and
Yashb404
committed
e745d42
Add security documentation for embed key protection

Copilot
and
Yashb404
committed
b7c8984
Fix closure scope and improve error handling based on code review

Copilot
and
Yashb404
committed
e63ff19
Add error logging and improve error handling for embed_key fetch

Copilot
and
Yashb404
committed
f3799d8
Reorder query fields to add 'id' at the end for maintainability

Copilot
and
Yashb404
committed
d89d045
Fix information disclosure by returning NOT_FOUND for non-owners

Copilot
and
Yashb404
committed
d484331
Fix closure capture of origin variable and improve error messages

Copilot
and
Yashb404
committed
3036331
Merge pull request #125 from TryCli-Studio/copilot/sub-pr-116-again
Yashb404
authored
14ea5ed
Merge pull request #124 from TryCli-Studio/copilot/sub-pr-116
Yashb404
authored
3b95b6e
Merge pull request #123 from TryCli-Studio/copilot/sub-pr-116-6b4d3b0e-9d33-4b96-b406-7451d177ea95
Yashb404
authored
f297755
Merge pull request #126 from TryCli-Studio/copilot/sub-pr-116-9da4b215-650a-40e1-90e7-81e27b77b3c7
Yashb404
authored
b6458a2
Fix error handling in dashboard and create pages

Copilot
and
Yashb404
committed
f149003
Run cargo fmt

Copilot
and
Yashb404
committed
705a0bf
Use CSS variables for consistent styling in error messages

Copilot
and
Yashb404
committed
33a77cb
Merge pull request #127 from TryCli-Studio/copilot/sub-pr-116-9718e6b3-dbfa-4fbd-b82d-4f9b2eee664a
Yashb404
authored
cc87040
Merge branch 'feat/keys-fresh' into copilot/sub-pr-116-one-more-time
Yashb404
authored
02cb40f
Merge pull request #121 from TryCli-Studio/copilot/sub-pr-116-one-more-time
Yashb404
authored
0046611
Merge branch 'feat/keys-fresh' into copilot/sub-pr-116-please-work
Yashb404
authored
d8d4863
Merge pull request #122 from TryCli-Studio/copilot/sub-pr-116-please-work
Yashb404
authored
eb0424e
Initial plan
Copilot
committed
5e104d4
Restore VIP link loading state that was lost during merges

Copilot
and
Yashb404
committed
b477d42
Update modal.rs
Yashb404
authored
f91245b
Merge pull request #128 from TryCli-Studio/copilot/sub-pr-116-please-work
Yashb404
authored
0ca6fb4

Commits on Feb 12, 2026

remove analytics event struct
Yashb404
committed
bb873bb
Merge branch 'main' into feat/keys-fresh
Yashb404
committed
b976e89
remove unnecessary mut
Yashb404
committed
2847c5c
reset allowed url to prevent issues in prod
Yashb404
committed
d74315a