MythEclipse/TeleUploader
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
206 Commits 1 Branch 0 Tags
main
Commit Graph
7 Commits
Author SHA1 Message Date
Claude de7d276245 fix: round 2 S3 audit — CRITICAL SigV4 payload hash bug, timeouts, Content-MD5/Length validation
Deploy FileDrop / deploy (push) Successful in 43s 
CRITICAL:
- SigV4 canonical request used sha256Hex('') instead of x-amz-content-sha256
  header value — every PUT/POST with body would fail 403. Now uses the
  signed header value for canonical request, verifyBodyHash after streaming
  for integrity.

HIGH:
- Add 30s AbortSignal.timeout to all Telegram CDN fetches in object-stream.ts
  (previously could hang indefinitely, exhausting connection pool)

MEDIUM:
- Content-MD5 validation: compute and compare when header is present
- Content-Length validation: reject if actual body size != header
- max-keys=0 clamping: enforce minimum of 1 per S3 spec

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
 2026-07-29 08:22:45 +07:00
asepharyana f88ac1a124 test: add real AWS SDK v3 S3 compatibility tests (20 tests) 
Tests use @aws-sdk/client-s3 against https://upload.asepharyana.my.id
with forcePathStyle=true. Covers all standard S3 operations:
ListBuckets, CreateBucket, HeadBucket, DeleteBucket, PutObject,
GetObject, HeadObject, ListObjectsV1/V2 (prefix, delimiter),
CopyObject, DeleteObject, DeleteObjects (batch), error handling.

Multipart is excluded from SDK tests — the SDK adds amz-sdk-* /
x-amz-user-agent to signed headers, which can differ between
signing time and the actual request through Cloudflare, causing
403 SignatureDoesNotMatch. Multipart is verified via manual
SigV4 signing in test/production-e2e.test.ts.
 2026-07-07 01:59:17 +07:00
MythEclipse fd5eb98586 feat: implement caching for file info, add rate limiting, and enhance upload handling with retry logic 2026-05-21 23:31:49 +07:00
MythEclipse aae8ebfbcf chore: update bun.lock to include @biomejs/biome, typescript, and related CLI packages 2026-05-18 07:30:47 +07:00
MythEclipseandClaude Opus 4.7 434905313c refactor: replace TypeScript with ESM JavaScript 
Remove index.ts and tsconfig.json, update package.json, and install dependencies.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-18 07:15:05 +07:00
MythEclipseandClaude Opus 4.7 281329a1af feat: add Drizzle ORM database layer 
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-18 07:00:46 +07:00
MythEclipse cf55f6dee8 Initialize TeleUploader project with Bun, including configuration files and basic setup 2026-05-18 06:34:02 +07:00