Phase 2 Hardening Release
We are excited to release the Phase 2 Hardening update for the Docsieve platform! This update closes critical feature requests, enhances security boundaries, and brings offline capability to documentation viewing.
What’s New
1. Real-Time SSE Progress Streams
The new crawl dashboard is powered by a real-time Server-Sent Events (SSE) progress stream. Users can see the exact pipeline step (queued, robots check, crawling pages, generating brief) as it executes. If SSE drops, a periodic polling fallback maintains visual feedback.
2. Offline Mode with IndexedDB Caching
We’ve implemented a robust service worker and IndexedDB cache layer:
- App assets are pre-cached for instant loading.
- Documentation briefs and indexes are saved locally in IndexedDB.
- Briefs are stored for up to 30 days for completely offline reading at
/offline.
3. Public Brief Sharing & SEO Hydration
Shared documentation briefs can now be rendered directly on the server (FastAPI Jinja2) for search engines, with Angular hydrating dynamically on top. Sharers can also disable ZIP downloads for specific tokens for granular access.
4. Secure BFF Cookie Authentication
We’ve migrated from local storage tokens to a secure Backend-For-Frontend (BFF) architecture. Session IDs are now stored exclusively in HttpOnly cookies, combined with double-submit CSRF headers. This completely eliminates XSS token extraction vectors.