JakeBreath 7deb6084b6 Fix staged upload previews and allow WebP ...

- Staged files are now served through a signed URL (Django signing, 24h)
  so <img>/<video> tags can load previews without an Authorization
  header; the file endpoint accepts header auth or a valid signature,
  rejects tampered signatures, and still scopes access to the owner
- Serializer responses now carry the request context so URLs are signed
  per user
- Add .webp to the allowed extensions (backend + upload hint)

2026-09-17 11:17:04 -05:00

..

apps

Fix staged upload previews and allow WebP

2026-09-17 11:17:04 -05:00

config

Phase 3: J-IDs, ownership, roles, guest safety, adaptive detail, download

2026-09-17 10:16:45 -05:00

.env.example

Phase 3: J-IDs, ownership, roles, guest safety, adaptive detail, download

2026-09-17 10:16:45 -05:00

manage.py

M0: scaffold SPA + API monorepo

2026-09-17 07:56:47 -05:00

requirements.txt

Phase 3: J-IDs, ownership, roles, guest safety, adaptive detail, download

2026-09-17 10:16:45 -05:00