amal66 puts an expiry date on sensitive downloads

New document links now time out, reducing the risk that a forwarded or leaked URL becomes a permanent route to confidential material.

security

amal66 has added a 30-day lifespan to newly issued download links. Once that window closes, the link no longer works, limiting the damage when a URL turns up in browser history, chat logs or a forwarded email.

The change takes a careful transition path: older links already embedded in chat history still work if they are authentic, avoiding a sudden wave of broken historical downloads. New links are checked for a valid, future expiry date, and attempts to alter or remove that deadline are rejected.

This is a small security control with a very practical payoff: document access is no longer indefinite by default.

So what Legal teams handling confidential files should care because it narrows the exposure window without abruptly cutting off access to existing matter history.

Spotted something wrong? Or know the PR text has fresher detail than the writeup above?

Commits in this thread

1 commit from amal66/mike, oldest first. Source extracted verbatim from the harvested git log.

SHA	Subject	Author	Date
`112a9a53`	fix(chapter-14): give download tokens an expiration time	Amal	2026-05-24	↗ GitHub
commit body Chapter: 14 - Secret lifetime. Plain-English map: Add a 30-day expiration to signed download tokens while keeping old tokens backward compatible. Why it matters: A signed link should not be useful forever. Shorter lifetimes reduce the damage if a link is copied, leaked, or found later. Principle: Secrets and bearer tokens should expire. Precedent borrowed: Upstream PR #77. Upstream base: willchen96/mike@d39f580. Original local commit: e6bfeb1.

SHA

Subject

Author

Date

112a9a53

fix(chapter-14): give download tokens an expiration time

Amal

2026-05-24

↗ GitHub

commit body

Chapter: 14 - Secret lifetime.

Plain-English map:
Add a 30-day expiration to signed download tokens while keeping old tokens
backward compatible.

Why it matters:
A signed link should not be useful forever. Shorter lifetimes reduce the
damage if a link is copied, leaked, or found later.

Principle:
Secrets and bearer tokens should expire.

Precedent borrowed:
Upstream PR #77.

Upstream base: willchen96/mike@d39f580.
Original local commit: e6bfeb1.

Capture this thread into my fork

Download a single Markdown prompt that tells Claude how to port every commit above into your working tree — adapting paths and structure to match your repo. Run it via claude -p < capture-thread-1398.md from inside the repo you want the changes in.