sneak 30cccebf32 Logging in returns to the page that was asked for (closes #384) ...

RequireAuth now sends a logged-out GET to /pages/login with its path
and query in a `next` parameter. The login form carries it as a hidden
field, and a successful login redirects there when it is a path on
this site; anything else, plain or percent-encoded, goes to `/`, which
leads to the webhook list. A browser already logged in that opens the
login page goes to the same place. The navigation bar on the login
page no longer links to the login page.

Model: opus-5-5

2026-10-01 20:45:57 +00:00

..

accesslog_test.go

Report handler panics through the logger and answer 500 (closes #187)

2026-08-18 08:33:12 +02:00

csrf_test.go

Default WEBHOOKER_ENVIRONMENT to prod (closes #307)

2026-09-28 12:47:31 +02:00

csrf.go

Derive cookie Secure and CSRF strictness from the request transport (closes #269)

2026-08-24 03:01:37 +02:00

export_test.go

Derive cookie Secure and CSRF strictness from the request transport (closes #269)

2026-08-24 03:01:37 +02:00

logbound_test.go

Bound every slog line against client-chosen text (closes #176)

2026-08-18 06:03:10 +02:00

loginguard_test.go

Stop a slow host turning a login-guard test into a segfault (closes #186)

2026-08-18 05:01:13 +02:00

loginguard.go

Bound every slog line against client-chosen text (closes #176)

2026-08-18 06:03:10 +02:00

metrics_method_test.go

Bound the /metrics method label (closes #261)

2026-08-24 02:03:18 +02:00

metrics_test.go

Bound the /metrics method label (closes #261)

2026-08-24 02:03:18 +02:00

metrics.go

Bound the /metrics method label (closes #261)

2026-08-24 02:03:18 +02:00

middleware_test.go

Logging in returns to the page that was asked for (closes #384)

2026-10-01 20:45:57 +00:00

middleware.go

Logging in returns to the page that was asked for (closes #384)

2026-10-01 20:45:57 +00:00

ratelimit_test.go

Verify login credentials before spending rate-limit budget (closes #150)

2026-08-18 01:55:41 +02:00

ratelimit.go

Resubmit a stored event as a new undelivered event (closes #250)

2026-08-24 00:53:37 +02:00

recoverer_test.go

Drop Set-Cookie from the recovered 500 (closes #193)

2026-09-29 10:30:26 +02:00

recoverer.go

Drop Set-Cookie from the recovered 500 (closes #193)

2026-09-29 10:30:26 +02:00

testing.go

refactor: use pinned golangci-lint Docker image for linting (#55)

2026-03-25 02:16:38 +01:00