bruno de86457f90 fix: prevent cross-user workspace leak via stale cookie ...

- _get_active_workspace now verifies workspace owner matches current user
- Fallback: only picks workspace owned by current user (not any user)
- /local-workspace redirects to /workspaces when no workspace exists
- New users no longer see other users' workspaces/projects

2026-07-14 16:09:03 -04:00

..

auth

v2.8.0 WIP: create/upload files + commit history + labels sync

2026-07-13 22:33:47 -04:00

middleware

feat(v4.0): GitHub routes + CSRF exemptions for share/publish

2026-07-14 12:19:37 -04:00

models

v3.0.1: qualité & stabilité — tests, sécurité, UX consolidée

2026-07-13 23:08:53 -04:00

routers

fix: prevent cross-user workspace leak via stale cookie

2026-07-14 16:09:03 -04:00

schemas

feat: FlowDeck v0.2.0 — Kanban Gitea intégré

2026-07-08 08:41:31 -04:00

services

fix: get_file_commits use consistent caching (_cached/_set_cache)

2026-07-13 22:57:46 -04:00

templates

feat: auto-create local workspace mirror for Gitea projects

2026-07-14 15:24:43 -04:00

__init__.py

feat: FlowDeck v0.2.0 — Kanban Gitea intégré

2026-07-08 08:41:31 -04:00

config.py

v2.8.0 WIP: create/upload files + commit history + labels sync

2026-07-13 22:33:47 -04:00

db.py

feat(v4.0): Settings/Integrations — Gitea + GitHub connect/disconnect matrix

2026-07-14 12:14:41 -04:00

main.py

feat(v4.0): GitHub routes + CSRF exemptions for share/publish

2026-07-14 12:19:37 -04:00

password_utils.py

feat: multi-user auth — local accounts, settings page, OAuth prep

2026-07-10 15:34:58 -04:00