siftlode

peter/siftlode

Fork 0

Commit graph

Author	SHA1	Message	Date
npeter83	2add173760	feat(m5c): onboarding — DB invites, request-access, admin approval, email Move the access whitelist from the ALLOWED_EMAILS env var into a DB Invite table (env kept as bootstrap fallback), and add a self-service request + admin approval flow with fail-soft email. - models: Invite(email, status pending\|approved\|denied, requested_at, decided_) - migration 0008: invites table; seed env ALLOWED_EMAILS u ADMIN_EMAILS as approved - auth: is_allowed() (DB-first, env fallback); a denied Google login records a pending request and bounces to /?access=requested instead of a raw 403; public POST /auth/request-access; upsert is idempotent so repeats don't re-spam admins - routes/admin.py (admin-only): list/approve/deny invites + manual add - email.py: smtplib + Gmail App Password, fail-soft (skips if SMTP unset) - /api/me exposes pending_invites; config + .env.example gain SMTP_ - UI: Login 'Request access' form + access=requested/denied handling; Settings -> Access requests (approve/deny + add); admin nudge toast on pending requests Verified locally: request-access creates a pending invite and emails the admin; seed approved npeter83; guinea-pig yt.trash2023 denied until approved.	2026-06-12 01:43:07 +02:00
npeter83	43c05ea14b	feat(m5b): optional YouTube write scope via incremental OAuth Default login now requests read-only (youtube.readonly); write (unsubscribe, later playlist export) is an explicit opt-in. - auth.py: split READ_SCOPES / WRITE_SCOPES; new GET /auth/upgrade (incremental consent, prompt=consent); has_write_scope() helper - /api/me exposes can_write - youtube/client.py: delete_subscription (50 units, OAuth-only) - DELETE /api/channels/{id}/subscription, gated on write scope (403 otherwise) - UI: Settings - Account 'Playlist editing & YouTube export' enable button; per-channel 'Unsubscribe on YouTube' (with confirm) shown only when can_write Browser-facing; develop/test locally until the public HTTPS login lands. Needs a one-time Console step: add youtube.readonly to the OAuth consent screen scopes.	2026-06-11 23:27:11 +02:00
npeter83	9a377b7e7e	feat: M4 (part 1) — feed API, watch state, user preferences - GET /api/feed: filter by tags (and/or), channel, duration, age, search; sort newest/oldest/views/duration/shuffle; default hides Shorts, live/upcoming and watched (was_live VODs stay visible); offset paging with has_more - POST /api/videos/{id}/state for watched/saved/hidden/new - User.preferences JSON + GET /api/me and PUT /api/me/preferences - Migration 0004 (preferences column + video_states table)	2026-06-11 02:11:02 +02:00

Author

SHA1

Message

Date

npeter83

2add173760

feat(m5c): onboarding — DB invites, request-access, admin approval, email

Move the access whitelist from the ALLOWED_EMAILS env var into a DB Invite table
(env kept as bootstrap fallback), and add a self-service request + admin approval
flow with fail-soft email.

- models: Invite(email, status pending|approved|denied, requested_at, decided_*)
- migration 0008: invites table; seed env ALLOWED_EMAILS u ADMIN_EMAILS as approved
- auth: is_allowed() (DB-first, env fallback); a denied Google login records a pending
  request and bounces to /?access=requested instead of a raw 403; public POST
  /auth/request-access; upsert is idempotent so repeats don't re-spam admins
- routes/admin.py (admin-only): list/approve/deny invites + manual add
- email.py: smtplib + Gmail App Password, fail-soft (skips if SMTP unset)
- /api/me exposes pending_invites; config + .env.example gain SMTP_*
- UI: Login 'Request access' form + access=requested/denied handling; Settings ->
  Access requests (approve/deny + add); admin nudge toast on pending requests

Verified locally: request-access creates a pending invite and emails the admin;
seed approved npeter83; guinea-pig yt.trash2023 denied until approved.

2026-06-12 01:43:07 +02:00

npeter83

43c05ea14b

feat(m5b): optional YouTube write scope via incremental OAuth

Default login now requests read-only (youtube.readonly); write (unsubscribe,
later playlist export) is an explicit opt-in.

- auth.py: split READ_SCOPES / WRITE_SCOPES; new GET /auth/upgrade (incremental
  consent, prompt=consent); has_write_scope() helper
- /api/me exposes can_write
- youtube/client.py: delete_subscription (50 units, OAuth-only)
- DELETE /api/channels/{id}/subscription, gated on write scope (403 otherwise)
- UI: Settings - Account 'Playlist editing & YouTube export' enable button;
  per-channel 'Unsubscribe on YouTube' (with confirm) shown only when can_write

Browser-facing; develop/test locally until the public HTTPS login lands. Needs a
one-time Console step: add youtube.readonly to the OAuth consent screen scopes.

2026-06-11 23:27:11 +02:00

npeter83

9a377b7e7e

feat: M4 (part 1) — feed API, watch state, user preferences

- GET /api/feed: filter by tags (and/or), channel, duration, age, search; sort
  newest/oldest/views/duration/shuffle; default hides Shorts, live/upcoming and
  watched (was_live VODs stay visible); offset paging with has_more
- POST /api/videos/{id}/state for watched/saved/hidden/new
- User.preferences JSON + GET /api/me and PUT /api/me/preferences
- Migration 0004 (preferences column + video_states table)

2026-06-11 02:11:02 +02:00

3 commits