Deluan d1b876097f refactor(api): use the grant secret as the API v1 bearer credential ... API v1 no longer mints short-lived JWT access tokens. Clients send the grant secret from POST /auth/login or /auth/setup as `Authorization: Bearer` on every request. Every request already looked the grant up in the database, so the JWT gave no speed or revocation benefit and only added a refresh loop, which early client authors pushed back on. The grant already is an API key: one per client sign-in, scoped and revocable. Revocation is now immediate on every node; the contract promises "within one minute". Removed: POST /auth/token, the grantAuth scheme, the TokenRequest and AccessToken schemas, the token_expired problem code, the API v1 JWT signer and its signing key, the grant liveness cache, and PropertyRepository.PutIfAbsent. ResolveGrant is now Authenticate. Short-lived tokens return later only as narrow media tokens for ?access_token= on media URLs, together with the media endpoints. Signed-off-by: Deluan <deluan@navidrome.org>		2026-09-28 21:05:57 -04:00
..
fixtures	fix(lastfm): report a failure when the artist page has no image (#6198)	2026-09-21 17:34:32 -04:00
harness	refactor(scanner): remove the unused legacy ffmpeg metadata extractor (#6231)	2026-09-26 12:30:52 -04:00
dns_stub.go	test(plugins): stub DNS in the host SSRF guard tests (#6208)	2026-09-23 18:42:11 -04:00
fake_http_client.go	Retry calls to Last.FM without MBIDs when if returns artist invalid (#1138)	2021-05-27 20:53:24 -04:00
init_tests.go	fix(artwork): only use image files as local artwork sources (#6180)	2026-09-20 13:40:14 -04:00
mock_album_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_artist_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_artwork_queue_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_artwork_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_data_store.go	feat(api): add api_grant storage for API v1 grants	2026-09-28 20:06:27 -04:00
mock_ffmpeg.go	refactor(scanner): remove the unused legacy ffmpeg metadata extractor (#6231)	2026-09-26 12:30:52 -04:00
mock_genre_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_grant_repo.go	feat(api): add api_grant storage for API v1 grants	2026-09-28 20:06:27 -04:00
mock_library_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_library_service.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_mediafile_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_player_repo.go	feat(subsonic): OpenSubsonic API key authentication (#6219)	2026-09-27 21:56:58 -04:00
mock_playlist_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_playlist_track_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_playqueue_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_plugin_manager.go	feat(plugins): allow mounting library directories as read-write (#5122)	2026-02-28 10:59:13 -05:00
mock_plugin_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_property_repo.go	refactor(api): use the grant secret as the API v1 bearer credential	2026-09-28 21:05:57 -04:00
mock_radio_repository.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_scanner.go	fix(server): return correct scanType in startScan response (#5159)	2026-03-09 14:19:53 -04:00
mock_scrobble_buffer_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_scrobble_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_share_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_tag_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_transcoding_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_user_props_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_user_repo.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
mock_user_service.go	refactor(persistence): stateless repositories with per-call context (#6149)	2026-09-25 18:06:10 -04:00
navidrome-test.toml	feat(plugins): experimental support for plugins (#3998)	2025-06-22 20:45:38 -04:00
test_helpers.go	ci: run Go tests on Windows (#5380)	2026-04-19 13:16:47 -04:00