GKaszewski/k-photos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
62 Commits 1 Branch 0 Tags
bcaf49cc815a0d3111c8bef3cd40bcb3bf8a510c
Commit Graph

10 Commits

Author SHA1 Message Date
Gabriel Kaszewski
bcaf49cc81 perf: scale fixes for 1M+ photo libraries 
Indexes: share_targets.target_id, duplicate_groups.status,
GIN on stacks members + duplicate candidates JSONB,
composite (owner_user_id, created_at DESC) on assets.

N+1 elimination: batch metadata loading via find_by_assets(ids)
using WHERE asset_id = ANY($1), used in timeline + sidecar export.

Visibility: cache find_targets_for_user per request via OnceCell,
extract filter_visible helper to reduce duplication.

Streaming: FileStoragePort.open_file() returns (DataStream, u64),
LocalFileStorage uses ReaderStream instead of loading full file.
serve_file/serve_derivative use Body::from_stream().

Unbounded queries: sidecar full_export/import batched in 500-row
chunks instead of u32::MAX. find_unresolved paginated with
limit/offset. list_duplicates API accepts pagination params.
 2026-05-31 22:40:25 +02:00
Gabriel Kaszewski
c6f82090d2 feat: auth hardening + codebase quality sweep 
Refresh tokens: RefreshToken entity, PostgresRefreshTokenRepository,
login returns refresh token, POST /auth/refresh (rotation), POST /auth/logout,
JWT expiry 24h→1h, configurable via with_expiry().

Route protection: require_auth middleware on protected routes,
public routes split (register, login, refresh, sharing/access).

Authorization: caller_id added to ReadAssetFileQuery, ReadDerivativeQuery,
GetStackQuery, DeleteStackCommand with ownership checks. Admin-only gates
on processing, storage, sidecar, duplicates handlers.

Quality fixes: visibility filtering bypass in search(), unwrap panics in
date parsing, DRY auth header parsing, centralized parsers module,
email validation via email_address crate, value objects (Username, MimeType,
RelativePath), domain events (UserCreated, UserDeleted, AlbumCreated,
TagCreated, DuplicateDetected), postgres error mapping for constraint
violations, OptionExt::or_not_found helper, in_memory_repo! macro,
GetStackQuery moved to queries, album add_entry 200→201.
 2026-05-31 22:26:02 +02:00
Gabriel Kaszewski
ef64e86439 feat: serve derivative files via GET /assets/{id}/derivatives/{profile} 
- ReadDerivativeHandler queries DerivativeRepository + FileStoragePort
- Profile URL param: thumbnail, thumbnail_large, web_optimized, video_sd
- Immutable cache headers (derivatives don't change once generated)
- Wired into bootstrap catalog service builder
 2026-05-31 21:10:58 +02:00
Gabriel Kaszewski
b5cda3afeb feat: add VisibilityFilteredAssetRepository decorator for automatic access control on asset queries 2026-05-31 19:06:49 +02:00
Gabriel Kaszewski
a6b86c23d8 feat: wire remaining handlers — tag, quota, register asset, sidecar, processing 
14 new endpoints: POST tags, GET quota, POST register, 6 sidecar, 7 processing.
DTOs, AppState groups, LogSidecarWriter, full bootstrap wiring.
 2026-05-31 11:04:22 +02:00
Gabriel Kaszewski
2d9dd2c2d0 refactor: clean up presentation layer — AppState grouping, multipart extractor, thin handlers 2026-05-31 06:14:19 +02:00
Gabriel Kaszewski
34b231a8f6 refactor: move business logic out of presentation — ReadAssetFile, checksum, auth checks, MetadataValue conversions 2026-05-31 06:10:07 +02:00
Gabriel Kaszewski
0f003a3bd6 feat: add file serving endpoint GET /assets/:id/file 2026-05-31 05:59:19 +02:00
Gabriel Kaszewski
9aba393fde feat: vertical slice — migrations, postgres adapters, presentation handlers, bootstrap wiring 2026-05-31 05:52:42 +02:00
Gabriel Kaszewski
201eff717d feat: add presentation layer + bootstrap wiring for vertical slice 2026-05-31 05:51:09 +02:00