bewCloud

Recent Commits

• Bruno Bernardino(20 Aug 26)

  Hide + change config path in deploy

• Bruno Bernardino(13 Aug 26)

  Make the chunk-based upload work more consistently Fix/remove the denosass dependency (#177) Fixes #177

• Tilman(13 Aug 26)

  Feature: Implement service worker for uploads (#174) * Implement service worker for uploads Allows page refreshes (intentional or accidental) during file and directory uploads without interrupting the upload. * Extract upload queue and register SW for Files, Notes, Photos * Ensure TS files like the new `useUploadQueue.ts` are always compiled correctly * Fix a caching bug * Implement suggested Upload Session Tag * Improved Upload error handling * Generate some tests * Update deno.lock * Abort SW upload queue on logout, broadcast upload kind * Tag upload queue items by kind, filter Notes/Files/Photos progress by it * Return 503, not 403, when uploads are refused because the app is disabled * Rebuild compiled components and tailwind output * Give Files and Photos their own upload kind, not a shared default * Rebuild compiled MainFiles/MainPhotos for the per-kind upload fix * Skip files that already exist before uploading them, not after * Rebuild compiled useUploadQueue for the pre-upload existence check * Cancel the upload queue and clean up .chunk-uploads when the destination directory is deleted * Scoped chunk cleanup, selective directory-delete abort, pre-check race/timeout, old-worker fallback * Route upload service worker messages through registration.active, not controller * Improve logout service worker messaging

• Bruno Bernardino(09 Aug 26)

  Update Deno and remove `--unstable-no-legacy-abort` "hacks"

• Bruno Bernardino(02 Aug 26)

  Addresses the UX/UI bug at https://github.com/bewcloud/bewcloud/issues/175#issuecomment-5153194315

• Bruno Bernardino(31 Jul 26)

  Fix changing email Fixes #175

• Bruno Bernardino(25 Jul 26)

  Update Deno and dependencies, prepare for new release

• Tilman(25 Jul 26)

  Improvement: Directory Download Optimizations (continued) (#173) * Stream zip directly to Response * Address PR feedback * Check for permissions, return 403 * Address potential status race condition

• Bruno Bernardino(03 Jul 26)

  Update default version for release

• Bruno Bernardino(03 Jul 26)

  Fix remaining WebDAV compliance issues found via real litmus testing Ran the actual litmus WebDAV test suite against a live server (not just manual curl) and fixed everything it caught: DELETE didn't recursively remove non-empty directories (threw 500 instead), MKCOL on an existing resource returned 409 instead of the RFC-mandated 405, MKCOL didn't reject request bodies (415), COPY/MOVE couldn't handle directories at all since Deno.copyFile is file-only (now uses @std/fs's copy, respects Depth: 0 for shallow copies, and correctly replaces an existing destination collection), PROPFIND silently ignored malformed/invalid XML instead of returning 400, and LOCK refresh didn't work when targeting a member of a Depth: infinity-locked collection. Real litmus results after these fixes: basic/copymove/http suites at 100%, props/locks suites substantially improved (remaining gaps are unimplemented features — PROPPATCH, shared locks, lock-null resources — not bugs). Closes #32

• Bruno Bernardino(03 Jul 26)

  Fix WebDAV protocol bugs and implement real LOCK/UNLOCK support Fixes MOVE/COPY building a bad filesystem path when the Destination header keeps its /dav/ prefix (#155), missing Overwrite header support (#169), filesystem errors collapsing to the wrong HTTP status (#170), and LOCK/UNLOCK being pure theater that enforced nothing while still advertising WebDAV class 2 support (#171) — replaced with real per-path lock tracking, Depth: infinity cascading, and 423 enforcement across PUT/DELETE/MOVE/COPY/MKCOL. Also adds regression coverage for the trailing-slash 307-redirect report in #32, which no longer reproduces since Fresh was removed. Fixes #155 Fixes #169 Fixes #170 Fixes #171

• Bruno Bernardino(29 Jun 26)

  Fix potential XSS in RSS feed reader

• Bruno Bernardino(29 Jun 26)

  Update default docker image version

• Bruno Bernardino(29 Jun 26)

  Feature: Sort by header (#168) * Make file and directory sorting case-insensitive Updated sorting functions to compare names in lowercase, ensuring case-insensitive sorting for files and directories. Addresses #101. * Use locale lowercase for sorting * Implement column sorting * Keep .Trash at the top, ignore sort * deno fmt * Use sort SVGs * Sort without page reload * Remove unnecessary server sorting * Address review comments, improvements * Undo random formatting for unrelated files * Fix server-side sorting (reload with and without params) Also run `make build` to update Tailwind --------- Co-authored-by: Tilman <[email protected]>

• Bruno Bernardino(27 Jun 26)

  Fix lint and update deno

• Bruno Bernardino(27 Jun 26)

  Merge pull request #166 from medallyon/feature/simpler-passkey-login Implement discoverable passkey flow

• Medallyon(27 Jun 26)

  #104 Implement discoverable passkey flow

• Bruno Bernardino(16 Jun 26)

  Fix (potential) security vulnerability Basically an attacker could try to get a file from the server if knowing/guessing the name, via the public/ file handler. Big facepalm no one'd noticed so far (this is safeguarded in the files model for user files, but not through the public route handler). Note that I tried but wasn't able to actually exploit this (I'm honestly unsure why, but wanted to get this out ASAP).

• Bruno Bernardino(10 Jun 26)

  Update default version

• Tilman(10 Jun 26)

  Bugfix/Improvement: Allow development & deployment on Windows (#165) * Bugfix: Sanitize '*' in downloaded filenames for Windows * Make dev workflow cross-platform compatible * Use toFileUrl to prevent incorrect 'c:' schema on Windows * Bugfix: Fall back to manual directory size if 'du -sh' is unavailable * Apply cross-platform comment suggestions Co-authored-by: Bruno Bernardino <[email protected]> * Consolidate Makefile with deno commands --------- Co-authored-by: Bruno Bernardino <[email protected]>

• Bruno Bernardino(05 Jun 26)

  Update some dependencies

• Bruno Bernardino(09 May 26)

  Update managed cloud URL

• Bruno Bernardino(06 May 26)

  Handle invalid cookies more gracefully

• Bruno Bernardino(06 May 26)

  Update Deno, remove Cookie headers in CardDav and CalDav requests Also fixes a logging problem where a 404 would show as 200 in the logs Fixes #162

• Bruno Bernardino(28 Apr 26)

  Disable automated CI actions for issue mirroring Brought to my attention over a potential script injection vulnerability Now it can only run manually, with intent.

• Bruno Bernardino(24 Apr 26)

  Update default version

• Bruno Bernardino(24 Apr 26)

  Merge pull request #160 from bewcloud/aquaspy/main Improvements for chunked file upload

• Bruno Bernardino(24 Apr 26)

  Minor fixes and tweaks Also add an updated static file

• Bruno Bernardino(24 Apr 26)

  Merge pull request #159 from aquaspy/main Add chunked file upload to bypass proxy request size limits

• Aquaspy(14 Apr 26)

  Reset upload progress between files in multi-file upload When uploading multiple files sequentially, the progress string from a previous chunked upload ("Uploading bigfile.zip (9/9)…") would persist in the status bar during the subsequent single-file upload. Clear uploadProgress at the start of each file so the display is accurate. Co-Authored-By: Claude Sonnet 4.6 <[email protected]>