6 Commits

Include renames

Author	SHA1	Message	Date
sneak	9e745f7b84	feat: CSRF protection on the login and URL-generator forms (closes #93) ... Both cookie-authenticated HTML form posts (POST / and POST /generate) now require a CSRF token via gorilla/csrf, the recorded default in GO_PACKAGE_DEFAULTS.md. The token cookie is independent of the session cookie, so it also covers the login POST, where no session exists yet (login CSRF). The token key is derived from the signing key with its own HKDF salt, so tokens survive restarts and reuse no other key material; gorilla/csrf supplies crypto/rand generation and constant-time compare. The form routes sit in a chi group behind the middleware; the hidden token field is rendered into login.html and generator.html. In local plaintext HTTP mode (debug) requests are marked plaintext so the library does not demand an https Referer or set a Secure cookie the browser would withhold; in production, behind the TLS-terminating proxy, it enforces its https Referer origin check. model: claude-opus-4-8	2026-09-21 07:40:07 +00:00
clawbot	2d805125ee	chore: update golangci-lint to v2.12.2 with canonical config (#54) ... Canonical v2-schema `.golangci.yml`, golangci-lint pins bumped to v2.12.2 in `Dockerfile` and `script/bootstrap`, and the tree brought to `0 issues.` under it. Three behaviour deltas: `Cache.StoreVariant` takes a context (cancelled requests skip the accounting row, recovered by reconciliation); `MetadataStorage.Store` no longer leaks `.tmp-*.json` on Write/Close/Rename failure (dead-defer bug fix); the `signing_key` too-short error text gained a `value too short:` prefix. Eviction-loop context cancellation deferred to #102.	2026-08-10 16:12:22 +02:00
sneak	87a8393537	Change encrypted URL format to /v1/e/{token}/img.{ext} ... Add trailing filename to encrypted URLs for better browser compatibility. The filename is ignored by the server but helps browsers identify content type.	2026-01-08 16:14:01 -08:00
sneak	3849128c45	Remove runtime nil checks for always-initialized components ... Since signing_key is now required at config load time, sessMgr, encGen, and signer are always initialized. Remove unnecessary nil checks that were runtime failure paths that can no longer be reached. - handlers.go: Remove conditional init, always create sessMgr/encGen - auth.go: Remove nil checks for sessMgr - imageenc.go: Remove nil check for encGen - service.go: Require signing_key in NewService, remove signer nil checks - Update tests to provide signing_key	2026-01-08 15:58:44 -08:00
sneak	014c144d73	Add 'Never' expiry option for encrypted URLs ... - Make ExpiresAt optional in CBOR (omitempty) for smaller tokens - Treat ExpiresAt=0 as 'never expires' in parser - URL-encode token with url.PathEscape() for safety - Add 'Never' as default TTL option in generator form	2026-01-08 11:08:11 -08:00
sneak	08d6e264ed	Add auth and encrypted image handlers ... Login page, logout, URL generator form, and /v1/e/{token} endpoint for serving images from encrypted URLs.	2026-01-08 07:38:15 -08:00