dependabot[bot]
5ae3bdd359
Bump the go-deps group with 4 updates
...
Bumps the go-deps group with 4 updates: [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt ), [golang.org/x/crypto](https://github.com/golang/crypto ), [gorm.io/driver/sqlite](https://github.com/go-gorm/sqlite ) and [gorm.io/gorm](https://github.com/go-gorm/gorm ).
Updates `github.com/golang-jwt/jwt/v5` from 5.2.0 to 5.2.1
- [Release notes](https://github.com/golang-jwt/jwt/releases )
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md )
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.0...v5.2.1 )
Updates `golang.org/x/crypto` from 0.17.0 to 0.21.0
- [Commits](https://github.com/golang/crypto/compare/v0.17.0...v0.21.0 )
Updates `gorm.io/driver/sqlite` from 1.5.4 to 1.5.5
- [Commits](https://github.com/go-gorm/sqlite/compare/v1.5.4...v1.5.5 )
Updates `gorm.io/gorm` from 1.25.5 to 1.25.7-0.20240204074919-46816ad31dde
- [Release notes](https://github.com/go-gorm/gorm/releases )
- [Commits](https://github.com/go-gorm/gorm/commits )
---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-deps
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-deps
- dependency-name: gorm.io/driver/sqlite
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-deps
- dependency-name: gorm.io/gorm
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-deps
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 15:58:10 +05:00
Ivan R.
d1dd325774
build: group dependabot pull requests
2024-03-25 15:56:01 +05:00
Ivan R.
6d25c4e8af
feat!: migrate to net/http
...
With the release of Go 1.22, the standard library now has
all the necessary functions that allow us to abandon Gin.
I hope this rewrite will lower the entry barrier for new developers.
As a nice bonus, the size of the program has decreased from 20 to 15.4 MB.
To solve issue #81 , request logging has been improved.
Now all errors are displayed in the logs.
2024-03-25 15:52:18 +05:00
Ivan R.
f0f8d4ff8d
style: group imports
2024-01-03 17:15:49 +05:00
dependabot[bot]
5738476c6b
Bump github.com/golang-jwt/jwt/v5 from 5.0.0 to 5.2.0
...
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt ) from 5.0.0 to 5.2.0.
- [Release notes](https://github.com/golang-jwt/jwt/releases )
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md )
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.0.0...v5.2.0 )
---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-01-02 21:21:52 +05:00
dependabot[bot]
7fc743abdb
Bump github/codeql-action from 2 to 3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-01-02 21:21:40 +05:00
dependabot[bot]
2f6a548d94
Bump golang.org/x/crypto from 0.14.0 to 0.17.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.14.0 to 0.17.0.
- [Commits](https://github.com/golang/crypto/compare/v0.14.0...v0.17.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-01-02 21:21:30 +05:00
dependabot[bot]
f2ca3867dd
Bump golang.org/x/crypto from 0.14.0 to 0.16.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.14.0 to 0.16.0.
- [Commits](https://github.com/golang/crypto/compare/v0.14.0...v0.16.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-01-02 21:20:45 +05:00
dependabot[bot]
adccabf7d6
Bump docker/metadata-action from 5.0.0 to 5.4.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 5.0.0 to 5.4.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](https://github.com/docker/metadata-action/compare/v5.0.0...v5.4.0 )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-01-02 21:20:25 +05:00
dependabot[bot]
b90f9cc548
Bump docker/build-push-action from 5.0.0 to 5.1.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 5.0.0 to 5.1.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-01-02 21:20:12 +05:00
Ivan R.
8a111fdedc
Simplify favicon
2023-11-02 21:50:36 +05:00
Ivan R.
9d269ba79f
Add appearance settings
2023-11-02 21:50:36 +05:00
Ivan R.
00dcd04eb7
Add the ability to change the title
2023-11-02 21:50:36 +05:00
Ivan R.
113d5860ff
Keep settings page position after editing ( #6 )
2023-11-02 21:50:36 +05:00
Ivan R.
77ddb3747b
Refactor API handlers
2023-11-02 21:50:36 +05:00
Ivan R.
e7fe2939cf
Update base docker images
2023-11-02 21:50:36 +05:00
Ivan R.
708a5a6d77
Add go report card
2023-11-02 21:50:35 +05:00
Ivan R.
7e2559afcb
Add an option to control the secure
parameter for cookies
2023-11-02 21:50:35 +05:00
Ivan R.
3520042abe
Move the token lifetime to a constant
2023-11-02 21:50:35 +05:00
dependabot[bot]
de70b9d310
Bump gorm.io/driver/sqlite from 1.5.3 to 1.5.4
...
Bumps [gorm.io/driver/sqlite](https://github.com/go-gorm/sqlite ) from 1.5.3 to 1.5.4.
- [Commits](https://github.com/go-gorm/sqlite/compare/v1.5.3...v1.5.4 )
---
updated-dependencies:
- dependency-name: gorm.io/driver/sqlite
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-01 20:33:34 +05:00
dependabot[bot]
6c3e8ed6b9
Bump docker/setup-buildx-action from 2.9.1 to 3.0.0
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 2.9.1 to 3.0.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2.9.1...v3.0.0 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-01 20:33:24 +05:00
dependabot[bot]
96fea0c729
Bump docker/build-push-action from 4.1.1 to 5.0.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 4.1.1 to 5.0.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/v4.1.1...v5.0.0 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-01 20:33:17 +05:00
dependabot[bot]
1001624a8b
Bump actions/checkout from 3 to 4
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-01 20:33:09 +05:00
dependabot[bot]
7d8e9a0c6f
Bump docker/login-action from 2.2.0 to 3.0.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 2.2.0 to 3.0.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v2.2.0...v3.0.0 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-01 20:33:01 +05:00
dependabot[bot]
64774c6765
Bump docker/metadata-action from 4.6.0 to 5.0.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 4.6.0 to 5.0.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md )
- [Commits](https://github.com/docker/metadata-action/compare/v4.6.0...v5.0.0 )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-01 20:32:54 +05:00
dependabot[bot]
3cdde7cc27
Bump golang.org/x/net from 0.10.0 to 0.17.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.10.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.10.0...v0.17.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-01 20:32:38 +05:00
dependabot[bot]
5a77ab921e
Bump gorm.io/gorm from 1.25.4 to 1.25.5
...
Bumps [gorm.io/gorm](https://github.com/go-gorm/gorm ) from 1.25.4 to 1.25.5.
- [Release notes](https://github.com/go-gorm/gorm/releases )
- [Commits](https://github.com/go-gorm/gorm/compare/v1.25.4...v1.25.5 )
---
updated-dependencies:
- dependency-name: gorm.io/gorm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-11-01 20:32:27 +05:00
Ivan R.
b986bac6b7
Create codeql.yml
2023-09-03 19:35:01 +05:00
Ivan R.
34701030cd
Docker: update golang and alpine containers
2023-09-03 19:18:50 +05:00
Ivan R.
02ef29bdea
Add font awesome integration ( #39 )
2023-09-03 19:08:33 +05:00
Ivan R.
a1b648da91
Extend access token lifetime
2023-09-03 16:09:51 +05:00
dependabot[bot]
7a803688de
Bump golang.org/x/crypto from 0.11.0 to 0.12.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.11.0 to 0.12.0.
- [Commits](https://github.com/golang/crypto/compare/v0.11.0...v0.12.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-09-03 15:18:42 +05:00
dependabot[bot]
05a7a657dc
Bump gorm.io/gorm from 1.25.2 to 1.25.4
...
Bumps [gorm.io/gorm](https://github.com/go-gorm/gorm ) from 1.25.2 to 1.25.4.
- [Release notes](https://github.com/go-gorm/gorm/releases )
- [Commits](https://github.com/go-gorm/gorm/compare/v1.25.2...v1.25.4 )
---
updated-dependencies:
- dependency-name: gorm.io/gorm
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-09-03 15:18:18 +05:00
dependabot[bot]
df0dfc74ce
Bump gorm.io/driver/sqlite from 1.5.2 to 1.5.3
...
Bumps [gorm.io/driver/sqlite](https://github.com/go-gorm/sqlite ) from 1.5.2 to 1.5.3.
- [Commits](https://github.com/go-gorm/sqlite/compare/v1.5.2...v1.5.3 )
---
updated-dependencies:
- dependency-name: gorm.io/driver/sqlite
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-09-03 15:17:05 +05:00
Ivan R.
f129268c9f
Merge pull request #40 from prologic/sso_header_auth
...
Add support for basic SSO via Trusted Header Auth
2023-08-28 10:50:48 +05:00
James Mills
f8c888d6b0
Fix a panic bug
2023-08-28 00:44:35 +10:00
James Mills
e827f0cb23
Add support for basic SSO via Trusted Header Auth
2023-08-28 00:26:16 +10:00
Ivan R.
5df95b26d9
Create security.md
2023-07-22 22:18:05 +05:00
Ivan R.
598bb05528
Create docker-test.yml
2023-07-22 22:08:24 +05:00
Ivan R.
565216b2a3
Fixes in the dockerfile
...
1. Fixed copying of source files.
2. Updated base images.
3. A new path has been selected for the executable file. It is more canonical for Linux.
2023-07-22 22:04:37 +05:00
Ivan R.
3f41e605cb
Always underline the settings link
...
I've also simplified the content security policy a bit
to make it less of a hassle.
2023-07-22 21:49:47 +05:00
Ivan R.
5cb00632e6
Bring back the registration page
2023-07-22 21:49:40 +05:00
Ivan R.
37e8663ac2
Add more settings, update readme and Dockerfile
2023-07-22 21:32:11 +05:00
Ivan R.
e24a3a754c
Update token cookie max age
2023-07-22 21:02:54 +05:00
Ivan R.
292df39bb8
Change path to API.
...
This helps you understand which paths return pages and which paths process forms.
2023-07-22 20:59:40 +05:00
Ivan R.
69eb490803
Add some headers to improve security
2023-07-22 20:49:13 +05:00
Ivan R.
de76c90f3c
Rename 'backend' module to 'database'
2023-07-22 15:24:01 +05:00
Ivan R.
3c9e30375e
Move API initialization
2023-07-22 15:19:04 +05:00
Ivan R.
2c08171c7a
Start using JWT tokens
...
I thought this was a good idea.
Pros: fewer database calls.
Cons: there is no way to revoke the token (except for changing the secret key).
I rewrote the authorization as a middleware. Request handlers no longer need to validate the user.
2023-07-22 13:42:43 +05:00
Ivan R.
7f42a90be6
Add simple config module
2023-07-22 11:33:14 +05:00