3 Commits

Include renames

Author	SHA1	Message	Date
nils	40f7f2fb5e	Multi-tenant: albums owned per photographer ... - albums.owner_id (migration 0003, backfilled to the original user) - owned::{album,photo,share} are the only admin data-access paths; another tenant's resources are indistinguishable from nonexistent (404) - every admin handler threaded through ownership; each ALLOWED_EMAILS entry is now its own isolated workspace - tenant-isolation integration test matrix (tests/tenancy.rs, env-gated on TEST_DATABASE_URL) driving the real router	2026-07-17 14:52:23 +02:00
nils	6259ca84d8	Content dedup on both sides, stored checksums, spool-free zips, upload stats ... - sha256+crc32 hashed during upload streaming; unique index per album - duplicate content returns the existing photo (race-safe via 23505) - client hashes locally (WebCrypto) and skips the transfer entirely for content the album already has - zip downloads stream S3->response directly using the stored crc32; pre-hash photos spool once and self-heal (crc via zip, sha via reprocess) - upload UI: overall progress bar, bytes, live speed, ETA	2026-07-17 14:41:07 +02:00
nilsandClaude	16d2a56a78	Initial release: self-hosted client photo gallery ... Rust (axum + sqlx) API and worker sharing a Postgres-backed job queue (SKIP LOCKED, heartbeat, reaper, typed statuses), S3 storage with derived keys and a fully private bucket, OIDC photographer login with per-request allowlist checks, client share links with argon2 passwords and lockout, cookie-based image authorization with sliding expiry, hand-rolled spec-compliant streaming ZIP downloads with exact Content-Length, React + Vite gallery frontend, single Docker image, Helm chart for external S3 + Postgres, and Gitea CI. Co-Authored-By: Claude <noreply@anthropic.com>	2026-07-17 13:12:42 +02:00