MileVault

owain/MileVault

Fork 0

Files

T

History

owain bdd5f80c7e

Build and push images / validate (push) Successful in 3s

Details

Build and push images / build-backend (push) Successful in 6s

Details

Build and push images / build-worker (push) Successful in 4s

Details

Build and push images / build-frontend (push) Successful in 8s

Details

Harden auth/upload, fix PR-delete cascade and sync backfill

- OIDC: require signed short-lived state on login callback; reject
  missing userinfo sub (account-takeover guard); validate token
  exchange + userinfo responses
- Upload: safe zip extraction (path-traversal + zip-bomb cap),
  streamed size-capped writes, sanitised filenames
- Garmin: increasing lookback resets last_sync_at for one-time backfill
- Activities: delete/reprocess remove PersonalRecord rows (no FK cascade)
- Profile: validate /weight limit; sync lookback UI copy
- Dashboard: sleep shading uses same day as charted body battery

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-09 20:24:24 +01:00