Skip to content

Add share-by-link functionality and fix privacy hash consistency - #31

Merged
isTravis merged 6 commits into
mainfrom
tr/sharing
Aug 6, 2026
Merged

Add share-by-link functionality and fix privacy hash consistency#31
isTravis merged 6 commits into
mainfrom
tr/sharing

Conversation

@isTravis

@isTravis isTravis commented Aug 6, 2026

Copy link
Copy Markdown
Member

No description provided.

X-Underlay-Record-Count reported the version's full recordCount while the
ndjson stream is privacy-filtered and ?type=-scoped, so the documented
"count the lines and resume if they differ" check never terminated for a
non-owner reading a collection with private content — and was wrong for
owners using ?type= too. Count what this request will actually emit.

The /versions list was the one version endpoint not applying
sanitizeVersionForPublic, so it returned actorId to non-owners while
latest/:n stripped it.

Docs:
- normalize version hashes to the private:/public: prefix they carry, and
  drop the spurious sha256: prefix from record/schema/file hashes, which
  are bare hex on the wire
- complete the error tables (401, 403, 413, 503; 409 covers both version
  conflict and duplicate-content) and state the 404-not-403 policy
- document ?token= (GET/HEAD only, falls through to anonymous when
  invalid) and the read-only POST exception for files/presign
@isTravis
isTravis merged commit 2262315 into main Aug 6, 2026
@isTravis
isTravis deleted the tr/sharing branch August 6, 2026 18:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant