Commit graph

8 commits

Author SHA1 Message Date
Murilo Scolari
272e12ec99 ci: add GitHub Actions workflow to publish Docker image to GHCR and add prod compose
Some checks are pending
Build and Publish Docker Image / Build and Push Docker Image (push) Waiting to run
2026-10-24 04:36:25 -03:00
Murilo Scolari
bcc22e9863 docs: complete Portuguese documentation for SimpSync setup, security, and usage 2026-10-24 04:32:46 -03:00
Murilo Scolari
815179a01a feat(server): harden backend with rate limiting, argon2id semaphore, bounded memory, and safe websocket hub 2026-10-24 03:26:31 -03:00
Murilo Scolari
40e3191878 feat: add recovery credential rotation
Allow clients to rotate authentication proofs through a hashed recovery key without exposing plaintext secrets.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-10-21 20:51:42 -03:00
Murilo Scolari
02cfe769d7 feat: add versioned migrations and recovery schema
Apply ordered database migrations at startup and add recovery and conflict persistence tables.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-10-21 20:48:17 -03:00
Murilo Scolari
26beee7e9c fix: harden websocket origin handling
Reject unconfigured browser origins while preserving native clients without an Origin header.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-10-21 20:47:49 -03:00
Murilo Scolari
525121a5e8 feat: add session and device lifecycle
Add expiring sessions, logout, device listing, and authenticated session checks to the sync API.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-10-21 20:46:43 -03:00
Murilo Scolari
54896cac8e feat: add encrypted sync backend MVP
Add the PostgreSQL-backed authentication, opaque blob synchronization, WebSocket notifications, and local development stack.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-10-21 20:38:52 -03:00