feat(pdf): #74 au complet — fix auth 500 stream + endpoint pdf/info + HTTP Range 206 + indexation incrementale PDF + config taille/timeout

README.md

@@ -310,6 +310,8 @@ When an **admin** account is logged in, a 🛡️ icon appears in the header. Cl
 | `OBSIGATE_REFRESH_TOKEN_TTL` | Refresh token lifetime (seconds) | `2592000` |
 | `OBSIGATE_LOGIN_MAX_ATTEMPTS` | Max login attempts per IP | `10` |
 | `OBSIGATE_LOGIN_WINDOW_SECONDS` | Rate limiting window (seconds) | `900` |
+| `OBSIGATE_PDF_MAX_SIZE_MB` | Max PDF size for text extraction | `50` |
+| `OBSIGATE_PDF_EXTRACT_TIMEOUT` | PDF extraction timeout (seconds) | `30` |
 
 >All these variables are documented in `.env.example`.
 
@@ -743,8 +745,10 @@ Extension filter examples: `ext:sh` for bash scripts, `ext:py` for Python script
 ### PDF support
 
 PDF files in your vaults are rendered inline in the browser via the native PDF viewer (iframe + `<embed>`).
+The viewer streams the file over HTTP Range requests (206 Partial Content), so large PDFs load progressively.
 Text is extracted on indexing (pypdf / pymupdf) so PDF content is searchable via the full-text search.
 Filter with `ext:pdf` to restrict results to PDFs.
+PDF metadata (pages, title, author) is available via `GET /api/file/{vault}/pdf/info` without transferring the document.
 
 **Limitations:** no OCR (scanned PDFs aren't searchable), no annotation, no editing of the PDF itself.