2 Commits

Include renames

Author	SHA1	Message	Date
john-okeefe	00a083b60b	Rename backend code references: Bookmann → Bookhoard ... Backend changes: - Update import paths: bookmann/internal → bookhoard/internal - Rename struct fields: BookmannUUID → BookhoardUUID - Update handler function names: mapContentIdToBookmannUUID → mapContentIdToBookhoardUUID - Update HTTP response headers: X-Bookmann-* → X-Bookhoard-* - Update service and middleware references - Update main.go imports and references This is part 2 of the project rename to Bookhoard.	2026-02-01 16:11:54 -05:00
john-okeefe	420af7978a	fix: critical security vulnerabilities ... - Fix type assertion panics in auth.go (9 handlers) * GetProfile, UpdateProfile, UpdateTheme, UpdateUsername * UpdateEmail, UpdatePassword, DeleteAccount * UpdateScanSettings, GetScanSettings, Register admin check * Replace c.Get("user_id").(string) with MustGetAuthenticatedUser() - Fix type assertion panic in library.go * GetUserVisibleLibraries now uses MustGetAuthenticatedUser() - Add path traversal protection to AddLibraryFolder * Detect and block ".." in paths * Clean paths with filepath.Clean() * Verify path is a directory before adding - Remove debug logging from Login handler * Removed all fmt.Printf statements * No more plaintext password logging - Create safe context helper functions * internal/handlers/context.go added * GetAuthenticatedUser() for safe retrieval * MustGetAuthenticatedUser() for post-auth middleware Security: Critical Tests: All 62 integration tests pass Breaking: None - backward compatible	2026-01-30 08:58:43 -05:00