于小丘 7200df6d87 fix: patch storage quota bypass and harden auth security ...

- Fix WebDAV chunked PUT bypassing storage quota when remaining_quota <= 0
- Add QuotaLimitedWriter to enforce quota during streaming writes
- Clean up residual files on write failure in end_write()
- Add Magic Link replay attack prevention via TokenStore
- Reject startup when JWT SECRET_KEY is not configured
- Sanitize OAuth callback and Magic Link log output

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-17 22:20:43 +08:00

..

settings

feat: add PATCH /user/settings/password endpoint for changing password

2026-02-14 15:11:56 +08:00

__init__.py

fix: patch storage quota bypass and harden auth security

2026-02-17 22:20:43 +08:00