Limit auth/read/write JSON traffic per IP while leaving audio streams unrestricted; close JWT+deviceId IDOR and add path/input guards.
Co-authored-by: Cursor <cursoragent@cursor.com>
Implement a new API endpoint to retrieve audio files based on episode ID, checking multiple potential file paths. This allows for serving existing audio files without re-downloading them, enhancing the efficiency of audio retrieval.
Replace episode bookmarks with surah/ayah bookmarks and ayah favorites;
import ayah text, notes, messages, and official per-ayah audio from gharaati.ir.