arian/anubis-mirror
1
0
Fork 0
mirror of https://github.com/TecharoHQ/anubis.git synced 2026-04-21 15:46:41 +00:00
Code Issues Packages Projects Releases Wiki Activity
419 Commits 190 Branches 41 Tags
364622d890c552b3605054db9088b9cfc537ee7e
Commit Graph

419 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Xe Iaso 364622d890 chore: fixes found in review 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 20:37:32 +00:00
Xe Iaso 41993466a1 docs(admin/policies): don't start a sentence with as 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:55:15 +00:00
Xe Iaso 3894469d98 Merge branch 'main' into Xe/store-interface 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:49:05 +00:00
Xe Iaso 8a3520466b docs: update CHANGELOG and internal links 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:47:54 +00:00
Xe Iaso 066e642310 docs(policy): document storage backends 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:36:43 +00:00
Xe Iaso e8e70122d6 chore(docs): listen on 0.0.0.0 for dev container support 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:36:32 +00:00
Xe Iaso 5b337cd322 docs(default-config): add a nudge to the storage backends section of the docs 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:36:11 +00:00
Xe Iaso a6e6caad7b chore(devcontainer): remove port forwards because vs code handles that for you 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 19:34:13 +00:00
Xe Iaso 9e19dc1ee4 Update metadata 
check-spelling run (pull_request) for Xe/store-interface

Signed-off-by: check-spelling-bot <check-spelling-bot@users.noreply.github.com>
on-behalf-of: @check-spelling <check-spelling-bot@check-spelling.dev>
 2025-07-04 18:48:17 +00:00
Xe Iaso b96ab68e85 test(lib/policy/config): ensure valkey stores can be loaded 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 18:46:33 +00:00
Xe Iaso 4845f8515d test(lib/store/valkey): disable tests if not using docker 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 18:38:35 +00:00
Xe Iaso 3808f7ba17 feat(lib/store): implement valkey backend 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 18:31:01 +00:00
Xe Iaso 59f69d48d2 fix(lib): make challenges live for 30 minutes by default 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 17:29:14 +00:00
Xe Iaso ded9c32801 chore(devcontainer): adapt to docker compose, add valkey service 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 17:28:52 +00:00
Duru Can Celasun d0fae02d05 feat(localization): Add Turkish language translation (#751) 
Signed-off-by: Xe Iaso <me@xeiaso.net>
Co-authored-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 00:50:16 -04:00
Xe Iaso 845095c3f6 chore(robots.txt): don't block CCBot 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 00:23:21 +00:00
Xe Iaso 2f1e78cc6c chore(docs/manifest): allow common crawl to test with the team 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-04 00:22:43 +00:00
Xe Iaso 7c0996448a chore(default-config): allowlist common crawl (#753) 
This may seem strange, but allowlisting common crawl means that scrapers
have less incentive to scrape because they can just grab the data from
common crawl instead of scraping it again.
 2025-07-04 00:10:45 +00:00
Xe Iaso d7a758f805 docs: add BotStopper docs from the git repo (#752) 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 23:09:45 +00:00
Xe Iaso 06b2dca7fc chore: go mod tidy 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 18:14:23 +00:00
Xe Iaso 1dceab889c chore: spelling 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 18:05:21 +00:00
Xe Iaso 45f6fa2194 feat(lib/store): add bbolt store implementation 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 18:02:17 +00:00
Martin c121896f9c feat(localization): Add German language translation (#741) 
* Add german translation

* Adjust german localization

* Adjust js_finished_reading in german localization

* Mention this change in CHANGELOG.md

* Add test for German localization

* Update lib/localization/locales/de.json

Co-authored-by: Florian Lehner <florianl@users.noreply.github.com>
Signed-off-by: Martin <31348196+Earl0fPudding@users.noreply.github.com>

* Remove duplicate "leider" in lib/localization/locales/de.json

Co-authored-by: Florian Lehner <florianl@users.noreply.github.com>
Signed-off-by: Martin <31348196+Earl0fPudding@users.noreply.github.com>

* Update lib/localization/locales/de.json

Co-authored-by: Florian Lehner <florianl@users.noreply.github.com>
Signed-off-by: Martin <31348196+Earl0fPudding@users.noreply.github.com>

* Update lib/localization/locales/de.json

Co-authored-by: Florian Lehner <florianl@users.noreply.github.com>
Signed-off-by: Martin <31348196+Earl0fPudding@users.noreply.github.com>

---------

Signed-off-by: Martin <31348196+Earl0fPudding@users.noreply.github.com>
Signed-off-by: Xe Iaso <me@xeiaso.net>
Co-authored-by: Florian Lehner <florianl@users.noreply.github.com>
Co-authored-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 10:48:17 +00:00
Xe Iaso 888b7d6e77 fix(run/anubis@.service): unique runtimedir per instance (#750) 
* fix(run/anubis@.service): unique runtimedir per instance

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore: spelling

Signed-off-by: Xe Iaso <me@xeiaso.net>

---------

Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 10:29:05 +00:00
Xe Iaso ddb7b0e99e fix(decaymap): invert locking process for Delete 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 04:50:11 +00:00
Xe Iaso acee62a9d0 chore: spelling 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 00:46:16 -04:00
Xe Iaso 2b3bfdc40b test(lib/store): make generic storage interface test adaptor 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 04:44:29 +00:00
Xe Iaso e538f55e89 chore(lib): fix SA4004 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 04:08:32 +00:00
Xe Iaso b8e0c1a961 chore(decaymap): fix documentation typo 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-03 04:07:44 +00:00
Xe Iaso def6f2dc90 feat(lib): use new challenge creation flow 
Previously Anubis constructed challenge strings from request metadata.
This was a good idea in spirit, but has turned out to be a very bad idea
in practice. This new flow reuses the Store facility to dynamically
create challenge values with completely random data.

This is a fairly big rewrite of how Anubis processes challenges. Right
now it defaults to using the in-memory storage backend, but on-disk
(boltdb) and valkey-based adaptors will come soon.

Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 23:56:23 +00:00
Xe Iaso e5c39facfe chore(policy): import all store backends 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 23:34:49 +00:00
Xe Iaso 18b21330df feat(lib/store): all metapackage to import all store implementations 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 23:17:51 +00:00
Xe Iaso 0f9da86003 feat(lib): implement store interface 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 23:12:27 +00:00
Xe Iaso 32afc9c040 chore(lib/challenge): refactor Validate to take ValidateInput 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 22:23:10 +00:00
Xe Iaso 9245c4beec feat(decaymap): add Delete method 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 22:22:34 +00:00
Martin 0e43138324 feat(localization): Add option for forcing a language (#742) 
* Add forcesLanguage option

* Change comments for forced language option

* Add changes to CHANGELOG.md

---------

Signed-off-by: Xe Iaso <me@xeiaso.net>
Co-authored-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 05:33:00 +00:00
Xe Iaso c981c23f7e chore: npm run generate 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-02 05:25:10 +00:00
Xe Iaso 9f0c5e974e fix(web/main): remove the success interstitial (#745) 
I'm gonna be totally honest here, I'm still not sure why #564 is still
an issue. This is really confusing and I'm going to totally throw out
how Anubis issues challenges and redo it with Valkey (#201, #622).

The problem seems to be that I assume that the makeChallenge function in
package lib is idempotent for the same client. I have no idea why this
would be inconsistent, but for some reason it is and I'm just at a loss
for words as to why this is happening.

This stops the bleeding by improving the UX as a stopgap.

Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-07-01 23:44:38 +00:00
Victor Fernandes 292c470ada Set cookies to have the Secure flag default to true (#739) 
* Set Cookies to use the Secure Flag and default SameSite to None

* Add secure flag test

* Updated changelog and documentation for secure flag option
 2025-06-30 14:58:31 -04:00
Rafael Fontenelle 12453fdc00 Fix translations in pt-BR.json (#729) 
Signed-off-by: Rafael Fontenelle <rffontenelle@users.noreply.github.com>
 2025-06-30 14:14:24 -04:00
Xe Iaso f5b3bf81bc feat: dev container support (#734) 
* chore: add devcontainer for Anubis

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore(devcontainer): ensure user can write to $HOME

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore(devcontainer): forward ports, add launch config

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore(devcontainer): add playwright deps

Signed-off-by: Xe Iaso <me@xeiaso.net>

* docs: document devcontainer usage

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore: spelling

Signed-off-by: Xe Iaso <me@xeiaso.net>

* ci(devcontainer): fix action references

Signed-off-by: Xe Iaso <me@xeiaso.net>

* chore(devcontainer): fix ko on arm64

Signed-off-by: Xe Iaso <me@xeiaso.net>

---------

Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-29 23:41:29 -04:00
dependabot[bot] 1820649987 build(deps): bump the gomod group with 2 updates (#736) 
---
updated-dependencies:
- dependency-name: github.com/a-h/templ
  dependency-version: 0.3.906
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-06-29 21:32:56 -04:00
dependabot[bot] 14eeeb56d6 build(deps): bump the github-actions group with 2 updates (#735) 
Bumps the github-actions group with 2 updates: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `astral-sh/setup-uv` from 6.3.0 to 6.3.1
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/445689ea25e0de0a23313031f5fe577c74ae45a1...bd01e18f51369d5a26f1651c3cb451d3417e3bba)

Updates `github/codeql-action` from 3.29.0 to 3.29.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ce28f5bb42b7a9f2c824e633a3f6ee835bab6858...39edc492dbe16b1465b0cafca41432d857bdb31a)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 6.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 3.29.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-06-29 20:53:14 -04:00
Martin d9e0fbe905 feat(cmd): Add custom cookie prefix (#732) 
* Add cookie prefix option

* Add explaination comment for TestCookieName

* Rename TestCookieName value from cookie-test-if-you-block-this-anubis-wont-work to cookie-verification

* Add changes to CHANGELOG.md

* Add values to CookieName and TestCookieName in anubis.go required for testcases
 2025-06-29 20:03:09 -04:00
Martin 6aa17532da fix: Dynamic cookie domain not working (#731) 
* Fix cookieDynamicDomain option not being set in Options struct

* Fix using wrong cookie name when using dynamic cookie domains

* Adjust testcases for new cookie option structs

* Add known words to expect.txt and change typo in Zombocom

* Cleanup expect.txt

* Add changes to changelog

* Bump versions of grpc and apimachinery

* Fix testcases and add additional condition for dynamic cookie domain
 2025-06-29 15:38:55 -04:00
Xe Iaso b1edf84a7c docs(blog/v1.20.0): i am smart 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-27 21:10:02 -04:00
Xe Iaso d47a3406db docs(blog/v1.20.0): how did CI not catch this? 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-27 19:55:58 -04:00
Xe Iaso ff5991b5cf docs(blog/v1.20.0): add cover image 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-27 19:20:12 -04:00
Xe Iaso 19f78f37ad docs(blog/v1.20.0): fix typo 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-27 18:59:07 -04:00
Xe Iaso b0b0a5c08a feat(blog): v1.20.0 announcement post 
Signed-off-by: Xe Iaso <me@xeiaso.net>
 2025-06-27 18:56:09 -04:00