Commits

main · SETUP.md

Live: Network keys and token checks from openvibe-sdk/auth (JWKS fallback, rotation) (#87)OpenVibers · 10 Oct 2026 8fd2066c
Live: Media outcomes arrive only over OpenVibe.Events; the direct media webhook and its authority switch are deleted (#68)OpenVibers · 10 Oct 2026 d7fb5009
Live after the switch to PostgreSQL: N-1 fixtures re-recorded from 81dc337 (the release now in production, so the N-1 SQL replay runs again); the docs say PostgreSQL (#47)OpenVibers · 8 Oct 2026 96f6bf55
Delete the P2P viewer fallback (ALLOW_P2P_FALLBACK, C-77): viewer media is SFU-only. (#37)OpenVibers · 7 Oct 2026 5c6a5cc4
Live reaches Media with its own service token (plan T4, Media cleanup D8): media-client and the lineage media source send a client-credentials token for audience openvibe.media (media.object.read/list/upload/delete on namespace live), one shared cached client, off under LIVE_DRILL, X-OV-User-Id unchanged; MEDIA_API_KEY is gone from code, docs and tests. test/media-service-token.test.js drives the token path, reuse, no-secret and the retired key never being sent. npm test 153/154, 1 skipped.OpenVibers · 29 Sept 2026 06f752af
X-Internal-Key is gone from Live (plan T2, step 3 of the sweep): every internal route takes only a Network service token with the capability it performs (live.avatar.write, live.url_registry.refresh, live.analytics.read, live.chat_mirror.write for Chat's staged-table handoff), loopback only. server/net/internal-key.js and config.internalApiKey are deleted; the proxy rule lives in service-guard.js. Network already sends its token on every call to Live (79a4eea). Tests: the retired key opens nothing (alone or beside a bad token), a token through the public edge is refused, and no server file reads or sends the key. SETUP, README, .env.example and the API docs describe the service token. npm test 151/152, 1 skipped.OpenVibers · 29 Sept 2026 66f590b7
openvibe-shared is the pinned OpenVibe.Shared v1.0.0 release: /shared/* serves the package's own browser-file list (now with nav-icons.js and user-card.js) from node_modules, vendor/openvibe-shared is goneOpenVibers · 23 Sept 2026 c9af7800
Initial OpenVibe releaseOpenVibers · 17 Aug 2026 ac0d6a47