4 Commits

Include renames

Author	SHA1	Message	Date
nils	84323ab637	Fix code-review findings on multi-tenant branch ... - images.rs: scope /api/img and /api/photos/{id}/original by album owner — close the cross-tenant original/thumbnail leak (tenancy test now covers these routes) - migration 0003: refuse to run when albums exist and users != 1 instead of silently reassigning every album to the oldest user - Gallery: callback-ref ResizeObserver so a gallery mounted empty still lays out once photos arrive (was permanently blank) - upload dedup: re-uploading identical content whose photo is in 'error' resets and re-enqueues it instead of returning the broken row - client hashing: skip (and fall back to plain upload) above 512MB to avoid whole-file arrayBuffer OOM / the ~2GiB cap - zip: always spool each entry (no unread prefetched S3 body held across a slow client stream) and backfill BOTH sha256 and crc32 for legacy photos - tests/auth: share one session_payload builder instead of re-implementing the cookie format in the test and mint_session	2026-07-17 15:16:25 +02:00
nils	6259ca84d8	Content dedup on both sides, stored checksums, spool-free zips, upload stats ... - sha256+crc32 hashed during upload streaming; unique index per album - duplicate content returns the existing photo (race-safe via 23505) - client hashes locally (WebCrypto) and skips the transfer entirely for content the album already has - zip downloads stream S3->response directly using the stored crc32; pre-hash photos spool once and self-heal (crc via zip, sha via reprocess) - upload UI: overall progress bar, bytes, live speed, ETA	2026-07-17 14:41:07 +02:00
nils	a6819809a7	Gallery: true justified layout (row-height scaling, no crop, no spacer)	2026-07-17 14:12:57 +02:00
nilsandClaude	16d2a56a78	Initial release: self-hosted client photo gallery ... Rust (axum + sqlx) API and worker sharing a Postgres-backed job queue (SKIP LOCKED, heartbeat, reaper, typed statuses), S3 storage with derived keys and a fully private bucket, OIDC photographer login with per-request allowlist checks, client share links with argon2 passwords and lockout, cookie-based image authorization with sliding expiry, hand-rolled spec-compliant streaming ZIP downloads with exact Content-Length, React + Vite gallery frontend, single Docker image, Helm chart for external S3 + Postgres, and Gitea CI. Co-Authored-By: Claude <noreply@anthropic.com>	2026-07-17 13:12:42 +02:00