8 Commits

Include renames

Author	SHA1	Message	Date
clawbot	a96eba8083	CSRF protection on the login and URL-generator forms (closes #93) ... Adds CSRF protection to the two cookie-authenticated form posts, POST / (login) and POST /generate, using github.com/gorilla/csrf, the recorded default for this job. The token key is derived from signing_key with its own HKDF salt, so it needs no new config and survives restarts. The token cookie is separate from the session cookie, which also covers login CSRF, where no session exists yet. Both templates carry the hidden token field. What a reader would trip over: outside debug mode the library enforces its https Referer origin check, so the TLS-terminating proxy must preserve the Host and Referer headers from the browser or form posts are rejected. Disclosure: one nolint:gosec on a test constant holding the library field name (G101 false positive). Model: opus-4-8 (implementation, review); fable-5-1 (landing message)	2026-09-21 19:26:18 +02:00
sneak	78f844fca5	Switch to govips for native CGO image processing ... - Replace gen2brain/avif, gen2brain/webp, disintegration/imaging with govips - govips uses libvips via CGO for fast native image processing - Add libheif-dev to Dockerfile for AVIF support - Add docker-test Makefile target for running tests in Docker - Update processor.go to use vips API for decode, resize, encode - Add TestMain to initialize/shutdown vips in tests - Remove WASM-based libraries (gen2brain) in favor of native codecs Performance improvement: AVIF encoding now uses native libheif instead of WASM, significantly reducing encoding time for large images.	2026-01-08 15:16:34 -08:00
sneak	1bdf0a9424	Implement AVIF decoding support ... - Add github.com/gen2brain/avif dependency (CGO-free, WASM-based) - Update decode() to try AVIF after WebP - Add AVIF to SupportedInputFormats()	2026-01-08 13:10:34 -08:00
sneak	70d55977c0	Add WebP encoding support ... Uses github.com/gen2brain/webp - a CGO-free library that uses WASM via wazero runtime for encoding. WebP decoding was already supported. - Add gen2brain/webp dependency for encoding - Implement WebP encoding in processor.go - Add FormatWebP to SupportedOutputFormats - Re-enable WebP option in generator form dropdown - Mark WebP encoding as complete in TODO.md	2026-01-08 11:55:45 -08:00
sneak	1f0ec59eb5	Wire up auth routes and encrypted URL endpoint ... Add session manager and encurl generator to handlers. Register /, /logout, /generate, /v1/e/{token}, /static/* routes.	2026-01-08 07:38:44 -08:00
sneak	6a20406b0f	Add -config flag using cobra to specify config file path	2026-01-08 04:58:05 -08:00
sneak	5462c9222c	Add pure Go image processor with resize and format conversion ... Implements the Processor interface using disintegration/imaging library. Supports JPEG, PNG, GIF, WebP decoding and JPEG, PNG, GIF encoding. Includes all fit modes: cover, contain, fill, inside, outside.	2026-01-08 03:54:50 -08:00
sneak	c491bc7af3	Add Go module definition	2026-01-08 02:18:49 -08:00