feat(mega): session-token auth, 2FA, worker hardening + thumbnails - #239

Merged

Gnathonic merged 21 commits into

developfrom

feat/mega-session-auth

Jun 30, 2026

Commits on Jun 30, 2026

docs(mega): design for session-token auth, 2FA, and worker hardening

Gnathonic
and
claude
committed
575a0c6
docs(mega): implementation plan for session-token auth, 2FA, worker hardening

Gnathonic
and
claude
committed
21e61c4
feat(mega): add pure session-token helpers (error classifiers, blob sanitizer, key encoder)

Gnathonic
and
claude
committed
d7da280
fix(mega): narrow session error-classifier regexes to precise MEGA tokens

Gnathonic
and
claude
committed
387d8b6
feat(mega): session-token login with 2FA support and password-free persistence

Gnathonic
and
claude
committed
ef635db
test(mega): seed legacy keys so login's password-removal assertion is meaningful

Gnathonic
and
claude
committed
26abf2e
feat(mega): restore + migrate via session token; refresh cache without re-login

Gnathonic
and
claude
committed
302264a
fix(mega): close stale storage on ESID during reinitialize to stop keepalive leak

Gnathonic
and
claude
committed
eae27bc
feat(mega): clear mega_session on logout and detect it for provider restore

Gnathonic
and
claude
committed
68f935e
feat(mega): upload worker authenticates via session blob instead of password

Gnathonic
and
claude
committed
40df8ae
feat(mega): two-step 2FA login UI and session-expiry reconnect prompt

Gnathonic
and
claude
committed
f04467a
chore(docs): prettier-format mega session-auth spec and plan

Gnathonic
and
claude
committed
498da0e
feat(mega): worker download credentials use sid + per-file key; drop share links

Gnathonic
and
claude
committed
0f153df
feat(mega): download owned nodes in workers via sid + per-file key (no share links)

Gnathonic
and
claude
committed
3dfd096
fix(mega): reject download promise if end-handler buffering fails; reset test chunks

Gnathonic
and
claude
committed
e726922
test(mega): cover worker-download error paths; harden 2FA input; tidy upload-cred shape

Gnathonic
and
claude
committed
2f2d950
fix(mega): never close() the shared session; reinitialize reloads in place

Gnathonic
and
claude
committed
952b432
feat(mega): attach a thumbnail attribute to uploaded image files

Gnathonic
and
claude
committed
95cc037
feat(mega): contain-fit upload thumbnails into 120x120 (no crop/stretch)

Gnathonic
and
claude
committed
c81f140
feat(mega): use a dark letterbox for upload thumbnails

Gnathonic
and
claude
committed
ff803ee
fix(mega): delete sidecars with the volume; stop sc-poll crash; fix delete toast

Gnathonic
and
claude
committed
088d4bc

Navigation Menu

feat(mega): session-token auth, 2FA, worker hardening + thumbnails - #239

feat(mega): session-token auth, 2FA, worker hardening + thumbnails#239
Gnathonic merged 21 commits into
developfrom
feat/mega-session-auth

Commits on Jun 30, 2026

docs(mega): design for session-token auth, 2FA, and worker hardening

docs(mega): implementation plan for session-token auth, 2FA, worker hardening

feat(mega): add pure session-token helpers (error classifiers, blob sanitizer, key encoder)

fix(mega): narrow session error-classifier regexes to precise MEGA tokens

feat(mega): session-token login with 2FA support and password-free persistence

test(mega): seed legacy keys so login's password-removal assertion is meaningful

feat(mega): restore + migrate via session token; refresh cache without re-login

fix(mega): close stale storage on ESID during reinitialize to stop keepalive leak

feat(mega): clear mega_session on logout and detect it for provider restore

feat(mega): upload worker authenticates via session blob instead of password

feat(mega): two-step 2FA login UI and session-expiry reconnect prompt

chore(docs): prettier-format mega session-auth spec and plan

feat(mega): worker download credentials use sid + per-file key; drop share links

feat(mega): download owned nodes in workers via sid + per-file key (no share links)

fix(mega): reject download promise if end-handler buffering fails; reset test chunks

test(mega): cover worker-download error paths; harden 2FA input; tidy upload-cred shape

fix(mega): never close() the shared session; reinitialize reloads in place

feat(mega): attach a thumbnail attribute to uploaded image files

feat(mega): contain-fit upload thumbnails into 120x120 (no crop/stretch)

feat(mega): use a dark letterbox for upload thumbnails

fix(mega): delete sidecars with the volume; stop sc-poll crash; fix delete toast