2 Commits

Author	SHA1	Message	Date
anders	4f3113199b	Security hardening ... - JWT: validate signing algorithm (prevent alg confusion) - Login: rate limiting (10 attempts per 5 min per IP) - Request body: 10MB size limit (prevent DoS) - WebSocket: require JWT auth (token query param or cookie) - Daemon endpoints: require admin role (not just any user) - io.LimitReader on all request body decoding	2026-05-26 22:51:33 +02:00
anders	ed4d0b261f	Real-time collaboration (Yjs + WebSocket) ... - Go WebSocket hub: rooms per document, broadcast updates, persist state - Yjs integration: connect/disconnect, sync document state - Collab toggle button in toolbar (Solo/Live) - When Live: edits broadcast to all connected users in real-time - Yjs state persisted to SQLite (survives server restart) - gorilla/websocket dependency added	2026-05-22 23:49:12 +02:00