Theodore Li
7349bf403f
feat(files): password, email-OTP, and SSO auth for public file shares (#5140)
* feat(files): password, email-OTP, and SSO auth for public file shares
* fix(files): suppress filename in share previews for email/sso, not just password
* fix(files): normalize allow-list emails to lowercase; genericize shared SSO denial message
* fix(security): make isEmailAllowed case-insensitive; normalize email at client gates
* test(security): cover isEmailAllowed case-insensitive matching
* fix(security): bind auth cookie to auth type; password endpoint rejects non-password shares
* chore(db): format generated migration meta
* fix(files): share upsert validation returns 400 not 500; disabling always succeeds
* feat(access-control): org admins can restrict allowed file-share auth types
2026-06-19 18:53:12 -04:00
..
2026-06-18 21:26:49 -04:00
2026-05-28 11:25:28 -07:00
2026-03-13 21:02:08 -07:00
2026-06-19 18:53:12 -04:00
2026-06-01 16:11:35 -07:00
2026-06-19 12:47:09 -07:00
2026-05-12 14:57:32 -07:00
2026-05-07 20:34:53 -07:00
2026-06-01 16:11:35 -07:00
2026-06-19 12:47:09 -07:00
2026-06-01 16:11:35 -07:00
2026-03-26 13:04:23 -07:00
2026-06-15 12:32:19 -07:00
2026-05-12 14:57:32 -07:00
2026-06-18 18:15:12 -04:00
2025-12-28 00:36:48 -08:00