Marc-André Bombeck 844dc8457d feat(share-links): attach documents and serve them through the share token ...

P3-1-T2/T4/T5. Extend createShareLinkSchema with an optional, bounded
documentIds set; validate each id as the caller's own live document and create
the membership rows in the same transaction (frozen write-once). Summary DTOs
gain documentCount (never ids, never bytes).

Add the public share-scoped serve route /c/<token>/d/<id>: token-resolved
(never requireAuth), passphrase-gated via the token-scoped unlock cookie,
revocation/expiry re-checked before any decrypt, confined to the link's frozen
document set (foreign/deleted id → flat 404), fail-closed decrypt, identical
serving-class posture as the owner route (inline Class A / attachment Class B,
nosniff, no-store), EXIF-stripped for raster images on egress, per-link rate
limit.

Carve the serve path out of the proxy's blanket DENY posture with the same
document CSP as the owner route (default-src 'none'; frame-ancestors 'self'),
anchored to exactly two dynamic segments so no lookalike over-matches.

2026-07-07 18:43:13 +02:00

..

__tests__

feat(share-links): attach documents and serve them through the share token

2026-07-07 18:43:13 +02:00

[id]

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

route.ts

feat(share-links): attach documents and serve them through the share token

2026-07-07 18:43:13 +02:00