arian/anubis-mirror
1
0
Fork 0
mirror of https://github.com/TecharoHQ/anubis.git synced 2026-04-10 02:28:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
419 Commits 190 Branches 41 Tags
Xe/store-interface
Commit Graph

419 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Xe Iaso
364622d890 chore: fixes found in review 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 20:37:32 +00:00
Xe Iaso
41993466a1 docs(admin/policies): don't start a sentence with as 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:55:15 +00:00
Xe Iaso
3894469d98 Merge branch 'main' into Xe/store-interface 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:49:05 +00:00
Xe Iaso
8a3520466b docs: update CHANGELOG and internal links 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:47:54 +00:00
Xe Iaso
066e642310 docs(policy): document storage backends 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:36:43 +00:00
Xe Iaso
e8e70122d6 chore(docs): listen on 0.0.0.0 for dev container support 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:36:32 +00:00
Xe Iaso
5b337cd322 docs(default-config): add a nudge to the storage backends section of the docs 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:36:11 +00:00
Xe Iaso
a6e6caad7b chore(devcontainer): remove port forwards because vs code handles that for you 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:34:13 +00:00
Xe Iaso
9e19dc1ee4 Update metadata 
check-spelling run (pull_request) for Xe/store-interface

Signed-off-by: check-spelling-bot <check-spelling-bot@users.noreply.github.com>
on-behalf-of: @check-spelling <check-spelling-bot@check-spelling.dev>
 2025-07-04 18:48:17 +00:00
Xe Iaso
b96ab68e85 test(lib/policy/config): ensure valkey stores can be loaded 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 18:46:33 +00:00
Xe Iaso
4845f8515d test(lib/store/valkey): disable tests if not using docker 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 18:38:35 +00:00
Xe Iaso
3808f7ba17 feat(lib/store): implement valkey backend 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 18:31:01 +00:00
Xe Iaso
59f69d48d2 fix(lib): make challenges live for 30 minutes by default 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 17:29:14 +00:00
Xe Iaso
ded9c32801 chore(devcontainer): adapt to docker compose, add valkey service 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 17:28:52 +00:00
Duru Can Celasun
d0fae02d05 feat(localization): Add Turkish language translation (#751) 
Signed-off-by: Xe Iaso <me@xeiaso.net>
Co-authored-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 00:50:16 -04:00
Xe Iaso
845095c3f6 chore(robots.txt): don't block CCBot 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 00:23:21 +00:00
Xe Iaso
2f1e78cc6c chore(docs/manifest): allow common crawl to test with the team 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 00:22:43 +00:00
Xe Iaso
7c0996448a chore(default-config): allowlist common crawl (#753) 
This may seem strange, but allowlisting common crawl means that scrapers
have less incentive to scrape because they can just grab the data from
common crawl instead of scraping it again.
 2025-07-04 00:10:45 +00:00
Xe Iaso
d7a758f805 docs: add BotStopper docs from the git repo (#752) 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 23:09:45 +00:00
Xe Iaso
06b2dca7fc chore: go mod tidy 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 18:14:23 +00:00
Xe Iaso
1dceab889c chore: spelling 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 18:05:21 +00:00
Xe Iaso
45f6fa2194 feat(lib/store): add bbolt store implementation 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 18:02:17 +00:00
Martin
c121896f9c feat(localization): Add German language translation (#741) 
* Add german translation

* Adjust german localization

* Adjust js_finished_reading in german localization

* Mention this change in CHANGELOG.md

* Add test for German localization

* Update lib/localization/locales/de.json

Co-authored-by: Florian Lehner <florianl@users.noreply.github.com>
Signed-off-by: Martin <31348196+Earl0fPudding@users.noreply.github.com>

* Remove duplicate "leider" in lib/localization/locales/de.json

Co-authored-by: Florian Lehner <florianl@users.noreply.github.com>
Signed-off-by: Martin <31348196+Earl0fPudding@users.noreply.github.com>

* Update lib/localization/locales/de.json

Co-authored-by: Florian Lehner <florianl@users.noreply.github.com>
Signed-off-by: Martin <31348196+Earl0fPudding@users.noreply.github.com>

* Update lib/localization/locales/de.json

Co-authored-by: Florian Lehner <florianl@users.noreply.github.com>
Signed-off-by: Martin <31348196+Earl0fPudding@users.noreply.github.com>

---------

Signed-off-by: Martin <31348196+Earl0fPudding@users.noreply.github.com>
Signed-off-by: Xe Iaso <me@xeiaso.net>
Co-authored-by: Florian Lehner <florianl@users.noreply.github.com>
Co-authored-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 10:48:17 +00:00
Xe Iaso
888b7d6e77 fix(run/anubis@.service): unique runtimedir per instance (#750) 
* fix(run/anubis@.service): unique runtimedir per instance

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore: spelling

Signed-off-by: Xe Iaso <me@xeiaso.net>

---------

Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 10:29:05 +00:00
Xe Iaso
ddb7b0e99e fix(decaymap): invert locking process for Delete 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 04:50:11 +00:00
Xe Iaso
acee62a9d0 chore: spelling 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 00:46:16 -04:00
Xe Iaso
2b3bfdc40b test(lib/store): make generic storage interface test adaptor 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 04:44:29 +00:00
Xe Iaso
e538f55e89 chore(lib): fix SA4004 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 04:08:32 +00:00
Xe Iaso
b8e0c1a961 chore(decaymap): fix documentation typo 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 04:07:44 +00:00
Xe Iaso
def6f2dc90 feat(lib): use new challenge creation flow 
Previously Anubis constructed challenge strings from request metadata.
This was a good idea in spirit, but has turned out to be a very bad idea
in practice. This new flow reuses the Store facility to dynamically
create challenge values with completely random data.

This is a fairly big rewrite of how Anubis processes challenges. Right
now it defaults to using the in-memory storage backend, but on-disk
(boltdb) and valkey-based adaptors will come soon.

Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 23:56:23 +00:00
Xe Iaso
e5c39facfe chore(policy): import all store backends 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 23:34:49 +00:00
Xe Iaso
18b21330df feat(lib/store): all metapackage to import all store implementations 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 23:17:51 +00:00
Xe Iaso
0f9da86003 feat(lib): implement store interface 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 23:12:27 +00:00
Xe Iaso
32afc9c040 chore(lib/challenge): refactor Validate to take ValidateInput 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 22:23:10 +00:00
Xe Iaso
9245c4beec feat(decaymap): add Delete method 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 22:22:34 +00:00
Martin
0e43138324 feat(localization): Add option for forcing a language (#742) 
* Add forcesLanguage option

* Change comments for forced language option

* Add changes to CHANGELOG.md

---------

Signed-off-by: Xe Iaso <me@xeiaso.net>
Co-authored-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 05:33:00 +00:00
Xe Iaso
c981c23f7e chore: npm run generate 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 05:25:10 +00:00
Xe Iaso
9f0c5e974e fix(web/main): remove the success interstitial (#745) 
I'm gonna be totally honest here, I'm still not sure why #564 is still
an issue. This is really confusing and I'm going to totally throw out
how Anubis issues challenges and redo it with Valkey (#201, #622).

The problem seems to be that I assume that the makeChallenge function in
package lib is idempotent for the same client. I have no idea why this
would be inconsistent, but for some reason it is and I'm just at a loss
for words as to why this is happening.

This stops the bleeding by improving the UX as a stopgap.

Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-01 23:44:38 +00:00
Victor Fernandes
292c470ada Set cookies to have the Secure flag default to true (#739) 
* Set Cookies to use the Secure Flag and default SameSite to None

* Add secure flag test

* Updated changelog and documentation for secure flag option
 2025-06-30 14:58:31 -04:00
Rafael Fontenelle
12453fdc00 Fix translations in pt-BR.json (#729) 
Signed-off-by: Rafael Fontenelle <rffontenelle@users.noreply.github.com>
 2025-06-30 14:14:24 -04:00
Xe Iaso
f5b3bf81bc feat: dev container support (#734) 
* chore: add devcontainer for Anubis

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore(devcontainer): ensure user can write to $HOME

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore(devcontainer): forward ports, add launch config

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore(devcontainer): add playwright deps

Signed-off-by: Xe Iaso <me@xeiaso.net>

* docs: document devcontainer usage

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore: spelling

Signed-off-by: Xe Iaso <me@xeiaso.net>

* ci(devcontainer): fix action references

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore(devcontainer): fix ko on arm64

Signed-off-by: Xe Iaso <me@xeiaso.net>

---------

Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-29 23:41:29 -04:00
dependabot[bot]
1820649987 build(deps): bump the gomod group with 2 updates (#736) 
---
updated-dependencies:
- dependency-name: github.com/a-h/templ
  dependency-version: 0.3.906
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-06-29 21:32:56 -04:00
dependabot[bot]
14eeeb56d6 build(deps): bump the github-actions group with 2 updates (#735) 
Bumps the github-actions group with 2 updates: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `astral-sh/setup-uv` from 6.3.0 to 6.3.1
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](445689ea25...bd01e18f51)

Updates `github/codeql-action` from 3.29.0 to 3.29.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](ce28f5bb42...39edc492db)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 6.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 3.29.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-06-29 20:53:14 -04:00
Martin
d9e0fbe905 feat(cmd): Add custom cookie prefix (#732) 
* Add cookie prefix option

* Add explaination comment for TestCookieName

* Rename TestCookieName value from cookie-test-if-you-block-this-anubis-wont-work to cookie-verification

* Add changes to CHANGELOG.md

* Add values to CookieName and TestCookieName in anubis.go required for testcases
 2025-06-29 20:03:09 -04:00
Martin
6aa17532da fix: Dynamic cookie domain not working (#731) 
* Fix cookieDynamicDomain option not being set in Options struct

* Fix using wrong cookie name when using dynamic cookie domains

* Adjust testcases for new cookie option structs

* Add known words to expect.txt and change typo in Zombocom

* Cleanup expect.txt

* Add changes to changelog

* Bump versions of grpc and apimachinery

* Fix testcases and add additional condition for dynamic cookie domain
 2025-06-29 15:38:55 -04:00
Xe Iaso
b1edf84a7c docs(blog/v1.20.0): i am smart 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-27 21:10:02 -04:00
Xe Iaso
d47a3406db docs(blog/v1.20.0): how did CI not catch this? 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-27 19:55:58 -04:00
Xe Iaso
ff5991b5cf docs(blog/v1.20.0): add cover image 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-27 19:20:12 -04:00
Xe Iaso
19f78f37ad docs(blog/v1.20.0): fix typo 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-27 18:59:07 -04:00
Xe Iaso
b0b0a5c08a feat(blog): v1.20.0 announcement post 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-27 18:56:09 -04:00