Cryptext v0.3.0

Cryptext v0.3.0

Security

• Enforce authentication on claim_key_package endpoint — prevent users from claiming other users' key packages
• Enforce group membership verification on store_welcome endpoint with 32KB payload size limit
• Verify group creator is included in member list during MLS group registration
• Add 5KB size limit per individual key package upload to prevent storage exhaustion
• Validate avatar upload content-type against whitelist (PNG, JPEG, WebP, GIF only)
• Redact server error details from frontend — return generic messages, log full errors to stderr
• Add per-IP rate limiting (60 req/s, burst 30) and per-user key package upload cap (max 500)
• Add UUID validation on all friend and MLS path parameter endpoints

Fixed

• Add 60-second buffer to session expiry checks to guard against clock skew between client and server
• Skip duplicate Welcome processing when MLS group already exists for a conversation
• Fix pagination edge case where same-timestamp messages could be skipped or duplicated (composite cursor with id tiebreaker)
• Surface MLS initialization failures to the user instead of silently swallowing them
• Add exponential backoff with jitter and reconnect failure callback to WebSocket hook
• Add explicit 30s request timeout and 10s connect timeout to HTTP client

Changed

• Add discriminated union types (WsNewMessage, WsStatusUpdate) for type-safe WebSocket messages
• Replace process_welcome_public wrapper with direct process_welcome export
• Extract MutexExt trait to replace 28 instances of .lock().map_err() boilerplate
• Extract local_message_from_row helper to deduplicate 4 row mapping sites in local DB
• Extract shared ErrorMessage component to replace 7 inline error display patterns
• Replace tuple destructuring with sqlx::FromRow derives in server friend and MLS routes