Spaces:
Paused
Paused
Commit History
-
Add live purge feature: catalogs + library, sourced from Stremio account API
FTA7700ef14e02
-
fix(trakt): send User-Agent so Cloudflare stops 403-blocking ratings
PNRxAThe shared reqwest client was built with no User-Agent (reqwest sends none by default). Trakt documents User-Agent as required and fronts api.trakt.tv with a Cloudflare WAF that returns a uniform 403 "you have been blocked" to UA-less requests — a recurring 2025-2026 issue. Because the client is shared across all providers, only Trakt (which enforces a UA) failed, with an identical 403 on every movie and show, matching the observed log flood. Set a descriptive User-Agent on the client builder, fixing every outbound provider call. Also harden optional-secret env parsing: trim and treat empty/whitespace as absent (new optional_secret helper) for OMDB/MDBLIST/FANART/TRAKT keys. A blank or CRLF/quote-contaminated TRAKT_CLIENT_ID previously still built a client that sent a junk key and 403'd on every title; now it cleanly disables the provider instead.24bde80
-
merge main
PNRxA5fac6c0
-
initial trakt implementation
PNRxA7f22b24 -
feat: add DISABLE_PUBLIC_PAGES to hide public routes on private instances
YagUber5cc036a
-
redact api keys in logs, limit image decode size, fix ip extraction, add
PNRxAreferrer-policy headerbe73249
-
additional test coverage, delete unused counter store
PNRxA6d06b8a
-
deduplicate image handlers and rename poster modules to image
PNRxA0c21886
-
add FREE_KEY_ENABLED env var to override the free API key toggle from
PNRxAthe admin UIeb8ae7b -
add EXTERNAL_CACHE_ONLY env var to skip most disk writes when behind a
PNRxACDN4256175
-
optional cdn redirects to allow caching of requests across paid users
PNRxA331eded
-
change default db dir
PNRxA36ac815 -
default db dir to data dir instead of cache
PNRxAabf777d -
separate cache and data
PNRxAc1dd29e -
added support for fanart posters, added per api and global settings
PNRxAfbc8659
-
CORS lockdown, path traversal prevention, error redaction, password max
PNRxAlength, API key log redaction, timing side-channel fix, HSTS, and poster rate limiting5f0e2ae -
init tests
PNRxAdd7a3f0 -
multi-layer moka caching
PNRxA54e4063 -
remove omdb requirement, any single ratings source is required
PNRxA9fb029b -
extend cache expiry over time
PNRxA4612e64 -
add additional ratings source mdblist, replace string matching with enum
PNRxAedfac31 -
initial scraping api endpoints
PNRxA0fcb5c2