saltbo 6e14fd6033 fix: multipart upload 500, presign 413, API key permissions, and org slug check ...

Bug 1: server/services/s3.ts — putObject passed Web ReadableStream to
AWS SDK which only accepts Node Readable or Uint8Array. Convert to
Uint8Array via Response.arrayBuffer() for cross-runtime compatibility.

Bug 2: server/routes/ihost.ts + shared/schemas — presign endpoint
returned 400 (zod validation) instead of 413 for oversized files.
Moved size check from schema .max() to handler with proper 413 status.

Bug 3: src/lib/api.ts — createIhostApiKey sent `permissions` in the
request body, but better-auth's apiKey plugin rejects client-set
permissions (SERVER_ONLY_PROPERTY). Removed it; server defaultPermissions
handles it automatically.

Also: session.create.before now checks org existence by slug before
creating, preventing UNIQUE constraint failures when membership was
revoked but org still exists.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-04-21 12:37:05 -04:00

..

schemas

fix: multipart upload 500, presign 413, API key permissions, and org slug check

2026-04-21 12:37:05 -04:00

types

feat: Images API /api/ihost/images — two-stage + stream-proxy upload + CRUD (#317)

2026-04-21 09:18:43 -04:00

constants.test.ts

feat(auth): add registration mode control and email verification (#283)

2026-04-13 11:19:54 -04:00

constants.ts

feat(auth): add registration mode control and email verification (#283)

2026-04-13 11:19:54 -04:00

oauth-providers.ts

feat(auth): add dynamic OAuth provider system (#282)

2026-04-12 21:46:11 -04:00