puter

lee/puter

0 Fork 0

mirror of https://github.com/HeyPuter/puter.git synced 2026-10-05 11:28:26 +00:00

Files

T

Juan Castro 438a4584de fix(hosting): keep alternate-host bootstrap stubs from shadowing private apps

A public origin-bootstrap app row planted on an alternate hosting domain
could resolve ahead of the owner's private app and skip the private
access gate (PUT-1883).

- get-user-app-token canonicalizes hosted-subdomain origins before uid
  derivation and bootstrap, so every hosting variant shares one app row
- the app create/update conflict check crosses hosting-domain variants,
  so an existing alt-host stub is absorbed by the owner's create
- resolveOwnedAppForHostedSite and the canonical-uid lookup order
  matches private-first with a deterministic id tiebreak

2026-09-23 16:39:22 -04:00

apps

fix: hardening (#3904 )

2026-09-18 11:22:39 -07:00

auth

fix(hosting): keep alternate-host bootstrap stubs from shadowing private apps

2026-09-23 16:39:22 -04:00

broadcast

fix: sharing, events and worker-credential authorization hardening (#3855 )

2026-09-11 21:18:49 -07:00

desktop

…