sneak/pixa - pixa - git.eeqj.de

190 Commits 11 Branches 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
clawbot	ac95c33cdb	Test that max-age never outlives an expiring image URL (closes #63 ) Route tests for both image routes. An image served through a signed URL expiring in 60 seconds, or an encrypted URL with a 60 second TTL, must get a max-age of at most 60. A URL with no expiry keeps one year. An allowlisted URL whose exp has already passed, which is served without checking exp, must get 0. The expiring cases fail until the fix that follows. Model: opus-5-5	2026-09-29 01:25:25 +00:00
clawbot	6010f5beb0	Refuse an unparseable exp with 400; log swallowed cache errors (closes #72 ) check / check (push) Successful in 12s Details An exp that was not a whole number, or empty, was ignored, so a URL for a host that needs a signature got 401 as if it had no exp. It is now a 400 naming exp and the value, on every host; only an exp missing from the URL is unchanged. A failed variant .meta write, source metadata JSON write, Stats count query, stats counter update, negative cache write or expired negative cache delete was discarded without a trace. Each is now logged at warn with the path or key and the error, and stays non-fatal, with tests for those that can be made to fail. VariantStorage takes the cache's logger. Model: opus-5-5	2026-09-28 19:59:39 +02:00
clawbot	db784bf561	Include quality and fit in the URL signature (closes #60 ) check / check (push) Successful in 12s Details The signed data is now host:path:query:width:height:format:expiration:quality:fit. The route turns a missing q into 85 and a missing fit into cover before checking the signature, so those are the values signed for a URL without them; imgcache fills both from the parsed request. imgcache.Service.GenerateSignedURL now writes q and fit into the URL next to sig and exp, first setting an unset quality or fit to 85 or cover, so a generated URL verifies for the values it signed. The known-answer vectors in golden_test.go, including one for quality 40 and fit contain, and the README signature section describe the new format. Model: opus-4-8 (implementation); opus-5-5 (rework)	2026-09-28 13:02:21 +02:00

Author

SHA1

Message

Date

clawbot

ac95c33cdb

Test that max-age never outlives an expiring image URL (closes #63 )

Route tests for both image routes. An image served through a signed URL
expiring in 60 seconds, or an encrypted URL with a 60 second TTL, must
get a max-age of at most 60. A URL with no expiry keeps one year. An
allowlisted URL whose exp has already passed, which is served without
checking exp, must get 0. The expiring cases fail until the fix that
follows.

Model: opus-5-5

2026-09-29 01:25:25 +00:00

clawbot

6010f5beb0

Refuse an unparseable exp with 400; log swallowed cache errors (closes #72 )

check / check (push) Successful in 12s

Details

An exp that was not a whole number, or empty, was ignored, so a URL for
a host that needs a signature got 401 as if it had no exp. It is now a
400 naming exp and the value, on every host; only an exp missing from
the URL is unchanged.

A failed variant .meta write, source metadata JSON write, Stats count
query, stats counter update, negative cache write or expired negative
cache delete was discarded without a trace. Each is now logged at warn
with the path or key and the error, and stays non-fatal, with tests for
those that can be made to fail. VariantStorage takes the cache's logger.

Model: opus-5-5

2026-09-28 19:59:39 +02:00

clawbot

db784bf561

Include quality and fit in the URL signature (closes #60 )

check / check (push) Successful in 12s

Details

The signed data is now
host:path:query:width:height:format:expiration:quality:fit. The route
turns a missing q into 85 and a missing fit into cover before checking
the signature, so those are the values signed for a URL without them;
imgcache fills both from the parsed request.

imgcache.Service.GenerateSignedURL now writes q and fit into the URL
next to sig and exp, first setting an unset quality or fit to 85 or
cover, so a generated URL verifies for the values it signed.

The known-answer vectors in golden_test.go, including one for quality
40 and fit contain, and the README signature section describe the new
format.

Model: opus-4-8 (implementation); opus-5-5 (rework)

2026-09-28 13:02:21 +02:00