sneak 306e075b5c Test that the URL signature covers quality and fit (closes #60) ...

Add Quality and FitMode to signature.Request, not yet part of the
signed data, and tests that a signature for quality 85 and fit cover is
refused when replayed with another quality or fit: one against
Signer.Verify, one through the image route. The route test also sends
the same signature with no q or fit and with q=85&fit=cover, which must
both pass, and sends URLs built by imgcache.Service.GenerateSignedURL.

The replay cases fail until the next commit.

Model: opus-4-8 (implementation); opus-5-5 (rework)

2026-09-28 10:22:53 +00:00

..

auth_clientip_internal_test.go

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

auth_csrf_internal_test.go

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

auth.go

Resolve real client IP behind trusted proxies (closes #94)

2026-09-22 10:25:41 +02:00

bodylimit_internal_test.go

Harden http.Server: slowloris timeouts and form body limit (closes #92)

2026-09-21 20:59:24 +02:00

bodylimit.go

Harden http.Server: slowloris timeouts and form body limit (closes #92)

2026-09-21 20:59:24 +02:00

csrf.go

CSRF protection on the login and URL-generator forms (closes #93)

2026-09-21 19:26:18 +02:00

handlers_internal_test.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

handlers.go

feat: blocked_networks config and extended SSRF ranges (closes #67)

2026-09-22 00:43:27 +02:00

healthcheck.go

Add doc comment to HandleHealthCheck method

2026-01-08 02:28:30 -08:00

image_signature_internal_test.go

Test that the URL signature covers quality and fit (closes #60)

2026-09-28 10:22:53 +00:00

image.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00

imageenc.go

next -> main (1.0.0 milestone) (#105)

2026-09-21 09:31:54 +02:00