Files
ExcaliDash/backend
copilot-swe-agent[bot] 5e782e4044 fix: scope drawings cache by userId and add Socket.io authentication
Security fixes:
1. Drawings cache now includes userId in cache key to prevent data leakage
   between users making identical queries.
2. Socket.io connections now require JWT authentication when auth is enabled.
3. Socket.io join-room verifies drawing ownership before allowing access.
4. Frontend passes auth token when connecting to Socket.io.

Co-authored-by: ZimengXiong <83783148+ZimengXiong@users.noreply.github.com>
2026-02-06 14:52:47 -08:00
..
2026-02-06 14:11:13 -08:00
2026-02-06 14:11:13 -08:00
2025-11-22 09:18:20 -08:00
MVP
2025-11-21 19:18:07 -08:00
2025-11-24 14:53:17 -08:00
2026-02-06 14:11:13 -08:00
MVP
2025-11-21 19:18:07 -08:00
2025-11-23 09:40:00 -08:00