| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Fix v3 build process and CSRF login/logout exclusions | Adam Mathes | 9 days | 1 | -3/+6 |
| | | | | | | | | - Update Makefile to correctly build and copy frontend-vanilla (v3) assets - Fix frontend-vanilla/vite.config.ts to build to its own dist directory - Normalize CSRF check path and exclude /api/logout to fix v3 session clearing - Include latest built assets for v3 | ||||
| * | Fix restricted login access and modernize login page | Adam Mathes | 9 days | 1 | -1/+1 |
| | | | | | | | | | - Close NK-oqd24q: Fix login access for v3/api - Update web.go to exclude /login/ from CSRF check during initial submission - Modernize web/static/login.html with new CSS and structure - Add web/login_test.go to verify CSRF exclusion - Created NK-ngokc3 for further CSRF enhancements | ||||
| * | Web: Make vanilla (v3) frontend the default at root, move react (v2) to /v2/ | Adam Mathes | 10 days | 1 | -7/+6 |
| | | |||||
| * | Scaffold Vanilla JS Frontend (v3): Create directory, update Makefile/web.go, ↵ | Adam Mathes | 10 days | 1 | -3/+6 |
| | | | | | embed dist/v3 | ||||
| * | Backend: Fix linting issues, improve error handling, and replace magic numbers | Adam Mathes | 10 days | 1 | -10/+10 |
| | | |||||
| * | Create 'make check' unified workflow and fix various lint issues | Adam Mathes | 10 days | 1 | -26/+14 |
| | | |||||
| * | Cleanup root directory by moving scripts to scripts/ and fix CSRF cookie ↵ | Adam Mathes | 11 days | 1 | -2/+2 |
| | | | | | policy for dev env | ||||
| * | task: delete vanilla js prototype\n\n- Removed vanilla/ directory and ↵ | Adam Mathes | 11 days | 1 | -7/+0 |
| | | | | | web/dist/vanilla directory\n- Updated Makefile, Dockerfile, and CI workflow to remove vanilla references\n- Cleaned up web/web.go to remove vanilla embed and routes\n- Verified build and tests pass\n\nCloses NK-2tcnmq | ||||
| * | feat: fix authentication to handle no-password scenario\n\n- Updated ↵ | Adam Mathes | 11 days | 1 | -0/+16 |
| | | | | | Authenticated() to return true when no password is configured\n- Updated apiLoginHandler to succeed when no password is set\n- Added comprehensive backend tests for both password/no-password cases\n- Added E2E tests for authentication flows (password tests are skipped by default)\n- All tests pass for both authentication scenarios\n\nFixes issue where app would require login even when no password was configured.\nNow properly supports passwordless mode for local development. | ||||
| * | feat: add secure_cookies configuration option\n\n- Added SecureCookies bool ↵ | Adam Mathes | 11 days | 1 | -3/+3 |
| | | | | | field to config.Settings\n- Added --secure-cookies command line flag\n- Updated CSRFMiddleware to use config setting instead of hardcoded value\n- Default is false for local development, set to true for production HTTPS\n- Updated config.example and README.md with documentation\n- Updated tests to pass config to CSRFMiddleware\n\nThis allows users to easily switch between insecure cookies (for local dev)\nand secure cookies (for production HTTPS) via config file or command line. | ||||
| * | fix: CSRF cookie configuration for local network access\n\n- Changed ↵ | Adam Mathes | 11 days | 1 | -1/+2 |
| | | | | | SameSite from Lax to None to allow cookie access across localhost/IP variations\n- Added Secure=false for local development (should be true in production with HTTPS)\n- Added credentials:'include' to all fetch requests to ensure cookies are sent\n- Updated tests to expect credentials parameter in fetch calls\n\nThis fixes the 403 Forbidden error when accessing from LAN IPs like 192.168.x.x | ||||
| * | fix: relax CSP to allow unsafe-eval for legacy UI | Adam Mathes | 11 days | 1 | -1/+1 |
| | | |||||
| * | routing: make new UI default at / and move legacy UI to /v1/ (fixing ↵ | Adam Mathes | 11 days | 1 | -1/+7 |
| | | | | | NK-mgmn5m, NK-p89hyt) | ||||
| * | security: add HTTP security headers (fixing NK-7xuajb) | Adam Mathes | 11 days | 1 | -1/+17 |
| | | |||||
| * | security: mitigate SSRF in image proxy and feed fetcher (fixing NK-0ca7nq) | Adam Mathes | 11 days | 1 | -3/+2 |
| | | |||||
| * | security: implement CSRF protection and improve session cookie security ↵ | Adam Mathes | 11 days | 1 | -5/+43 |
| | | | | | (fixing NK-gfh33y) | ||||
| * | Refactor: project structure, implement dependency injection, and align v2 UI ↵ | Adam Mathes | 11 days | 1 | -12/+20 |
| | | | | | with v1 | ||||
| * | Audit and reduce Go dependencies: replace go.rice with embed, pflag with flag | Adam Mathes | 12 days | 1 | -40/+25 |
| | | |||||
| * | Optimize asset packaging: move UI assets to root dist/ and decouple rice ↵ | Adam Mathes | 12 days | 1 | -4/+4 |
| | | | | | embedding | ||||
| * | feat: add vanilla JS frontend prototype (NK-2xsgef) | Adam Mathes | 12 days | 1 | -0/+11 |
| | | |||||
| * | fix(v2): remove distracting selection styles and fix build (NK-8rhpp3) | Adam Mathes | 12 days | 1 | -23/+61 |
| | | |||||
| * | Implement robust Gzip middleware and update page size analysis | Adam Mathes | 12 days | 1 | -4/+89 |
| | | |||||
| * | Implement Frontend Logout with tests | Adam Mathes | 12 days | 1 | -0/+8 |
| | | |||||
| * | Implement frontend login logic with >90% coverage | Adam Mathes | 13 days | 1 | -0/+39 |
| | | |||||
| * | Scaffold new frontend and close NK-t0nmbj | Adam Mathes | 13 days | 1 | -0/+3 |
| | | |||||
| * | wip: tui updates (buggy) | Adam Mathes | 13 days | 1 | -1/+11 |
| | | |||||
| * | Refactor backend to a clean REST API | Adam Mathes | 13 days | 1 | -188/+28 |
| | | | | | | | | | | | - Created new 'api' package with testable router and RESTful handlers - Handlers in 'api' use proper HTTP methods and status codes - Standardized JSON responses and error handling - Refactored 'web' package to delegate logic to 'api' - Maintained backward compatibility for legacy frontend routes - Simplified 'web/web_test.go' and added comprehensive 'api/api_test.go' - All tests passing with improved modularity | ||||
| * | wip adding /crawl/ manual crawl update | Adam Mathes | 2018-07-04 | 1 | -0/+13 |
| | | |||||
| * | enable feed export from web interface | Adam Mathes | 2018-07-04 | 1 | -0/+9 |
| | | |||||
| * | wip, simplifications | Adam Mathes | 2018-07-04 | 1 | -1/+1 |
| | | |||||
| * | log fatal web serving errors | Adam Mathes | 2018-06-17 | 1 | -1/+1 |
| | | |||||
| * | add back in search support, requires sqlite | Adam Mathes | 2018-06-16 | 1 | -1/+7 |
| | | |||||
| * | remove runtime static file dependencies, use rice boxes | Adam Mathes | 2018-06-12 | 1 | -14/+17 |
| | | |||||
| * | debug cleanup | Adam Mathes | 2018-04-29 | 1 | -2/+3 |
| | | |||||
| * | separator for scrape | Adam Mathes | 2018-04-27 | 1 | -8/+41 |
| | | |||||
| * | img proxy | Adam Mathes | 2018-04-26 | 1 | -4/+17 |
| | | |||||
| * | img proxy | Adam Mathes | 2018-04-26 | 1 | -9/+24 |
| | | |||||
| * | wip img proxy | Adam Mathes | 2018-04-24 | 1 | -0/+26 |
| | | |||||
| * | wip single category on feed | Adam Mathes | 2018-04-22 | 1 | -2/+24 |
| | | |||||
| * | crawl immediately on web feed add | Adam Mathes | 2017-04-17 | 1 | -0/+6 |
| | | |||||
| * | switch to single binary (neko) with standard flags. update config file to ↵ | Adam Mathes | 2017-02-20 | 1 | -17/+23 |
| | | | | | use nicer names | ||||
| * | change to personal namespace | Adam Mathes | 2017-02-07 | 1 | -3/+3 |
| | | |||||
| * | fix includes | Adam Mathes | 2017-02-02 | 1 | -4/+3 |
| | | |||||
| * | add back in starred functionality, fix login page | Adam Mathes | 2017-01-30 | 1 | -1/+6 |
| | | |||||
| * | better cookie handling | Adam Mathes | 2017-01-26 | 1 | -7/+6 |
| | | |||||
| * | shitty cookie auth that needs work but safari keeps asking me for my digest ↵ | Adam Mathes | 2017-01-25 | 1 | -21/+55 |
| | | | | | auth password and it is annoying so, whatev | ||||
| * | neko v2 initial commit | Adam Mathes | 2017-01-23 | 1 | -0/+131 |
 |
index : neko | |
| self-hosted, single user rss reader | git@adammathes.com |
| aboutsummaryrefslogtreecommitdiffstats |