validateShareInfo migrates share links to add default sidebar links

verifyPragmaSettings reads back PRAGMA values to verify they were applied correctly

withBasicAuth returns an http.HandlerFunc for use with router.Handle. It extracts Basic Auth credentials and uses the password as a JWT token to authe

withBasicAuthHelper extracts Basic Auth credentials and uses the password as a JWT token to authenticate the user. The username is ignored, and the pa

Middleware to ensure the user is either the requested user or an admin

withTimeoutHelper adds a configurable timeout context to any operation

wrapHandlerBasicAuth wraps a handler and automatically sets WWW-Authenticate header for 401 Unauthorized responses, triggering Basic Auth challenge

AddHashedToken adds a token hash to user ID mapping.

NormalizeRulePath ensures directory paths have trailing slashes for consistent rule storage

Auth authenticates the user via an HTTP header.

Auth authenticates the user via an external JWT token. The token is verified using the configured secret and algorithm.

Auth uses authenticates user 1.

Auth authenticates the user via a json in content body.

Benchmark the orientation filter generation

Benchmarks (optional, keep small)

BuildNode constructs a yaml.Node for any Go value, injecting comments on struct fields.

BuildSearchOptionsFromQuery merges optional repeated literal terms (HTTP "terms" parameters) with structured filter text ("query" prefix). When termVa

BulkInsertFilesForDuplicates inserts multiple files in a single transaction. This is more efficient than calling InsertFileForDuplicates multiple time

CSPNonce returns a base64-encoded random value suitable for Content-Security-Policy nonces and matching HTML nonce="" attributes (cryptographically ra

CheckPwd checks if a password is correct.

Clamp returns value clamped between min and max. If value < min, returns min. If value > max, returns max. Otherwise, returns value.

ClearCache clears the access cache (useful for testing)

ClearDirectoryContents removes all files and subdirectories inside dir; dir itself remains. If dir does not exist, returns nil.

ClearTestIndices removes all test indices - call in test cleanup

CollectComments parses all Go source in the directory of srcPath and returns CommentsMap.

ConvertPermissionsToUsers converts UserDefaultsPermissions to users.Permissions

Copy copies a file or folder from one place to another.

CreateDuplicatesTable creates the files table and indexes needed for duplicate detection. This should be called once after creating a TempDB for dupli

CreateThumbnail decodes an image and creates a fixed-size thumbnail.

create new user

CredentialFromLibrary converts a library Credential to our BoltDB-safe format.

DB returns the underlying *sql.DB connection. This allows callers to execute custom SQL queries if needed.

Delete allows you to delete a user by its name or username. The provided id must be a string for username lookup or a uint for id lookup. If id is nei

Delete wraps StorageBackend.Delete

Delete wraps StorageBackend.Delete

DetectAllSubtitles finds both embedded and external subtitle tracks

DetectEmbeddedSubtitles detects embedded subtitle streams using ffprobe. This is the public API that can be called from other packages. Returns empty

EffectiveDirPerm returns [PermDir] if [SetFsPermissions] was called, otherwise 0o755. On Unix, [os.Mkdir] with perm 0 fails with permission denied, so

EffectiveFilePerm returns [PermFile] if set, otherwise 0o644.

ExplainQueryPlan analyzes a query and returns the execution plan as a string. This is useful for debugging and optimizing queries to reduce page cache

ExtractGroupsFromClaims extracts groups from JWT claims based on the configured groups claim field

ExtractSubtitleContent extracts subtitle content without service management

FindByUserID returns non-expired shares for the user from the cache.

Flush persists the current in-memory state to the backing store. Call during graceful shutdown to ensure DB matches memory.

Flush persists the current in-memory state of all indexes to the backing store. Call during graceful shutdown to ensure DB matches memory.

Flush is a no-op: every share write (Save, Delete, UpdateShares, UpdateSharePath) already updates the database, so the cache and DB stay in sync witho

Flush persists all index information to the database

GenerateConfigYamlWithEmbedded generates YAML from a given config using embedded YAML content as comment source

GenerateKey generates a key of 512 bits.

GeneratePWAIcons generates all PWA and platform icon sizes from favicon source All icons are generated as PNG for maximum compatibility (Apple devices