Claude 52eab5b6e4 feat: robust login with rate limiting + diff propagation across tree ...

Login hardening:
- API: in-memory rate limiter (10 attempts / IP / 15 min), timing-safe credential comparison, strict body validation
- Middleware: validate session token timestamp expiry (7-day window) not just HMAC signature
- Logout: also clears oidc_token_pub cookie
- Login page: try/catch around fetch to surface network errors, parse OIDC error query params, disable inputs during loading, wrap useSearchParams in Suspense

Diff propagation:
- DiffViewer: shows inherited ancestor patches in a collapsible section above own patches
- CVTree: annotates each branch with ↑N ancestor patch count badge; propagate (↓) button on hover for versions with own patches and child branches
- Dashboard: computeInheritedPatches/getDescendants helpers; Propagate ↓ action button in version header; handlePropagate sends current version's patches to all descendants via appendPatches

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Stdyi4YmG1BUSurArZPe8w

2026-06-19 11:00:41 +00:00

..

backend

feat: live PDF preview, upload-to-branch diff, and copy markdown per branch

2026-05-02 21:31:49 +00:00

webapp

feat: robust login with rate limiting + diff propagation across tree

2026-06-19 11:00:41 +00:00

webapp-minimal

Initial commit

2026-04-02 18:47:14 +02:00

worker

Finish MVP and dockerize

2026-04-02 19:15:47 +02:00