vantablackTea/Messenger
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

2 Releases 2 Tags

RSS Feed
  • v1.0.1 61183d3f89
    Compare

    Messenger v1.0.1
    CI / Go (build + vet + test) (push) Canceled after 0s
    Details
    CI / Web (build + lint) (push) Canceled after 0s
    Details
    Stable

    vantablackTea released this 2026-09-28 13:05:45 +03:00 | 8 commits to main since this release

    Redesign of UI to fit old internet era, aka Webcore / Old Web.

    Downloads
  • v1.0.0 6fc6d977bf
    Compare

    Messenger v1.0.0
    CI / Go (build + vet + test) (push) Canceled after 0s
    Details
    CI / Web (build + lint) (push) Canceled after 0s
    Details
    Stable

    vantablackTea released this 2026-09-27 23:28:21 +03:00 | 11 commits to main since this release

    Changelog

    [1.0.0] - 2026-09-27

    First production release. Self-hosted messenger for family and friends,
    built from scratch.

    Added

    • Auth: registration/login, JWT access tokens (15 min) + rotated refresh
      tokens (30 days) in httpOnly cookies, argon2id password hashing,
      session revocation, rate-limited auth endpoints.
    • Chat: direct messages and groups (roles owner/member), read receipts,
      typing indicators, presence, unread counters, keyset pagination.
    • Realtime: in-process WebSocket hub delivering message.created, typing,
      presence, read, reaction and membership events.
    • Media: file upload/download with image thumbnails, S3-like storage
      interface, local disk backend, path-traversal protection, 25 MiB limit.
    • Reactions: emoji reactions on messages with live sync.
    • Search: substring message search scoped to the user's conversations.
    • Web Push: VAPID notifications to offline members (optional, needs keys).
    • PWA: installable app, offline app-shell caching, Web Push service worker.
    • Frontend: React + TypeScript + Tailwind, dark theme, responsive,
      optimistic UI.
    • Observability: Prometheus /metrics (HTTP, WS, runtime), VictoriaMetrics
      • Grafana dashboard in deploy/.
    • Hardening: security headers (CSP, X-Frame-Options, nosniff), request
      body limits, session cleanup, graceful shutdown.
    • Tooling: cmd/keygen (VAPID keys), cmd/seed (demo data),
      GitHub Actions CI with PostgreSQL service.

    Notes

    • Video attachments are supported as files; inline playback is planned.
    • E2EE is on the roadmap via libsignal; TLS in transit is the current baseline.
    Downloads