2 Commits

Author	SHA1	Message	Date
Jacopo	3d0a10dbdd	Security: Fix user impersonation via custom bot token ... If bot_key has no right-hand side (ex: 1-), bot_token will be nil, and the query will match a User record if bot_id matches a valid ID. Fix it relying on `active_bots` instead.	2025-09-11 12:32:46 +02:00
Kevin McConnell	df76a227dc	Hello world ... First open source release of Campfire 🎉	2025-08-21 09:31:59 +01:00