| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-07-21 | Apply review suggestions | Shadowghost | |
| 2026-07-21 | Merge remote-tracking branch 'upstream/master' into ↵ | Shadowghost | |
| security-path-traversal-fixes # Conflicts: # Jellyfin.Api/Controllers/HlsSegmentController.cs # Jellyfin.Api/Controllers/PluginsController.cs | |||
| 2026-07-20 | Merge pull request #17282 from TowyTowy/fix/13137-clear-profile-image | Cody Robibero | |
| Fix profile image being impossible to clear when its in-memory key is temporary | |||
| 2026-07-20 | Merge pull request #17302 from ElianCodes/fix/lastlogindate-stale-entity | Bond-009 | |
| Keep authenticated user entity in sync with persisted login timestamps | |||
| 2026-07-17 | Harden remaining path-construction sinks against traversal | Shadowghost | |
| 2026-07-11 | Keep authenticated user entity in sync with persisted login timestamps | Elian Van Cutsem | |
| ExecuteUpdateAsync bypasses the EF change tracker, so the user entity returned by AuthenticateUser still carried the old LastLoginDate and LastActivityDate. SessionManager.LogSessionActivity then saved that stale entity in full, reverting LastLoginDate (usually to null) milliseconds after every login. Setting the properties on the entity keeps the follow-up save consistent and lets the 60-second activity guard skip the redundant write during login. Fixes #17301 | |||
| 2026-07-09 | Fix profile image being impossible to clear when its in-memory key is temporary | TowyTowy | |
| ClearProfileImageAsync removed the ProfileImage instance attached to the passed-in User, but that instance can carry a stale, never-persisted (temporary) key because UpdateUserAsync creates the persisted image on a separately loaded entity and never copies the generated key back. Removing that detached entity on a fresh DbContext made EF Core throw InvalidOperationException ('ImageInfo.Id has a temporary value'), leaving the profile image impossible to delete or replace. Load the tracked, persisted user and remove its actual ProfileImage, matching the removal pattern already used in UpdateUserAsync. Adds regression tests covering the temporary-key case and the no-image no-op (the first fails before this change and passes after). Fixes #13137 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> | |||
| 2026-07-08 | Fix max login attempts | theguymadmax | |
| 2026-07-03 | Allow changing capitalization of usernames | Bond_009 | |
| Fixes #17195 Adds a regression test | |||
| 2026-06-07 | Backport pull request #16944 from jellyfin/release-10.11.z | JPVenson | |
| Add lockhelper for UserManager Original-merge: 39958ad9e51f83f520803aa9bc5e70e58f3a0836 Merged-by: Bond-009 <bond.009@outlook.com> Backported-by: Bond_009 <bond.009@outlook.com> | |||
| 2026-05-26 | Backport: Fix/user manager collation (#16919) | Bond-009 | |
| Backport: Fix/user manager collation | |||
| 2026-05-05 | Backport changes from #15368 | JPVenson | |
| 2026-01-31 | Optimize Validator and Filter Performance | Shadowghost | |
| 2025-12-28 | Backport pull request #15752 from jellyfin/release-10.11.z | Collin-Swish | |
| Fix case sensitivity edge case Original-merge: b50ce1ad6b3239245897a648dd24cf407138abfc Merged-by: Bond-009 <bond.009@outlook.com> Backported-by: Bond_009 <bond.009@outlook.com> | |||
| 2025-11-27 | Merge pull request #14950 from nielsvanvelzen/security-remove-has-password | Niels van Velzen | |
| Deprecate HasPassword property on UserDto | |||
| 2025-11-02 | Backport pull request #15254 from jellyfin/release-10.11.z | thornbill | |
| Update password reset to always return the same response structure Original-merge: 4ad31418753840ca76c52fc2aa56fa1a4235ca87 Merged-by: crobibero <cody@robibe.ro> Backported-by: Joshua M. Boniface <joshua@boniface.me> | |||
| 2025-10-05 | Deprecate HasPassword property on UserDto | Niels van Velzen | |
| 2025-09-20 | Attach before updating/deleting to avoid DbUpdateConcurrencyException (#14746) | evan314159 | |
| 2025-08-06 | Revert "Merge pull request #13604 from Jxiced/master" | Bond_009 | |
| This reverts commit ce78af2ed4f203690a0f9ef87b08b27a6bd43f63, reversing changes made to db7465e83d9cc07134a0bffad7ed17b1c7b873da. | |||
| 2025-08-03 | Merge branch 'master' into master | Joshua M. Boniface | |
| 2025-03-30 | Rework parental ratings (#12615) | Tim Eisele | |
| 2025-03-25 | Fixed namespaces | JPVenson | |
| 2025-03-25 | WIP fixed namespaces | JPVenson | |
| 2025-03-01 | Merge remote-tracking branch 'jellyfinorigin/master' into ↵ | JPVenson | |
| feature/DatabaseRefactor | |||
| 2025-02-23 | Move throw into interface to use in wizard, check for null and invalid username. | Jxiced | |
| 2025-02-21 | Prevent whitespaces in username during wizard setup. | Jxiced | |
| 2025-02-14 | Update Jellyfin.Server.Implementations/Users/UserManager.cs | Jxiced | |
| Co-authored-by: gnattu <gnattu@users.noreply.github.com> | |||
| 2025-02-14 | Update regex and revert previous changes to ThrowIfInvalidUsername. | Jxiced | |
| 2025-02-14 | Update ThrowIfInvalidUsername to include whitespaces. | Jxiced | |
| 2025-01-29 | Changed UserName to non-deterministic field | JPVenson | |
| 2025-01-26 | Prepared Seperation of Database components for future multi provider support | JPVenson | |
| 2024-11-03 | Added + in username regex validator, Test + in username, issue #10414 (#12819) | SethPattee | |
| 2024-10-20 | Add catch to remove cached user if creation fails (#12574) | JPVenson | |
| 2024-09-06 | Merge pull request #12545 from Bond-009/sha1 | Niels van Velzen | |
| Remove passwordSha1 param from AuthenticateUser function | |||
| 2024-08-30 | Remove BOM from UTF-8 files | Bond_009 | |
| I think some people need to change their IDE configuration ;) | |||
| 2024-08-30 | Remove passwordSha1 param from AuthenticateUser function | Bond_009 | |
| 2024-05-17 | Backport pull request #11670 from jellyfin/release-10.9.z | gnattu | |
| Restore caching for UserManager Original-merge: f8b67ec44cc6432d89d918f54caffa45eef037d0 Merged-by: nielsvanvelzen <nielsvanvelzen@users.noreply.github.com> Backported-by: Joshua M. Boniface <joshua@boniface.me> | |||
| 2024-02-26 | Store lyrics in the database as media streams (#9951) | Cody Robibero | |
| 2024-01-17 | Use helper function to compare guid (#10825) | Cody Robibero | |
| 2024-01-06 | Remove UserManager Cache (#10781) | Patrick Barron | |
| * Remove redundant user cache * Use DI for IPasswordResetProvider and IAuthenticationProvider | |||
| 2023-11-14 | Revert "Use System.Net.IPNetwork" | Bond_009 | |
| This reverts commit 117d05d288da1d412159a29c0cb8d5c8259e48ae. | |||
| 2023-11-14 | Fix warnings | Bond_009 | |
| 2023-10-27 | Merge pull request #10410 from Ch1nkara/add-users-permission-to-edit-subtitles | Claus Vium | |
| add EnableSubtitleManagement permission | |||
| 2023-10-18 | add EnableSubtitleManagement permission | chinkara | |
| 2023-10-17 | Merge pull request #10366 from goremykin/fix-resharper-warnings | Bond-009 | |
| 2023-10-14 | Shorten lines from review | Cody Robibero | |
| 2023-10-10 | Merge branch 'master' into chromecast-config | Cody Robibero | |
| # Conflicts: # Emby.Server.Implementations/ApplicationHost.cs | |||
| 2023-10-08 | Reduce string literal length by using verbatim string | Stepan Goremykin | |
| 2023-10-03 | Remove unused fields and parameters | Patrick Barron | |
| 2023-09-23 | Validate cast receiver id on get/set | Cody Robibero | |
 |
index : jellyfin | |
| Unnamed repository; edit this file 'description' to name the repository. |
| aboutsummaryrefslogtreecommitdiff |