4 Commits

Include renames

Author	SHA1	Message	Date
poslop	b0360af79c	Merge pull request 'Fix #83: create API ignores boolean public field' (#88) from fix-83-public-false into main	2026-09-09 15:59:26 +00:00
Hermes Agent	ccb22a2d28	#83: accept boolean public field in create API (false->unlisted, true->public)	2026-09-09 10:57:56 -05:00
poslop	91568c0598	fix #63: require deletion token on DELETE /api/pastes/{id} ... - DELETE now demands the create-time deletion token (Authorization header: Bearer/Token/bare, or ?token= query param), compared with the constant-time store.DeletionTokenEqual. 403 otherwise. - Creator-browser deletes via the /mine button (matching vwr cookie, #37) remain allowed; other browsers and plain API clients get 403. - Regression tests: no token, wrong token (header+query), correct token (header+query), creator-cookie path, token extraction. - Adapted TestSoftDelete to pass the deletion token. - docs/API.md delete section updated. - Based on #58's SoftDelete (bool, error) signature.	2026-09-09 09:21:28 -05:00
poslop	238dc96454	README rework: user-first structure, features, screenshots, config table; API detail moved to docs/API.md (#47)	2026-09-08 23:54:54 -05:00