summaryrefslogtreecommitdiff
path: root/internal/middleware
AgeCommit message (Expand)AuthorFiles
2025-10-17[bugfix] Fix "client IP could not be parsed" error msg (#4497)Libravatar tobi1
2025-10-07[bugfix] Log a warning when clientIP could not be parsed during rate limiting...Libravatar tobi1
2025-09-17[chore] remove nollamas middleware for now (after discussions with a security...Libravatar kim2
2025-09-04[performance] faster request id generation (#4405)Libravatar kim2
2025-07-29[performance] bump codeberg.org/gruf/go-kv to v2 (#4341)Libravatar kim1
2025-06-11[bugfix] process account delete synchronously to prevent OOM (#4260)Libravatar kim1
2025-05-26[feature] update proof-of-work to allow setting required rounds (#4186)Libravatar kim2
2025-05-22[feature] Add ListenBrainz functionality on the web view (#4184)Libravatar tobi2
2025-05-22[chore] Upgrade to Go 1.24 (#4187)Libravatar Daenney1
2025-05-07[feature] make nollamas difficulty configurable (#4119)Libravatar kim2
2025-05-06[bugfix] ensure timeline limit query is respected (#4141)Libravatar kim1
2025-05-03[chore] more NoLLaMas proof-of-work tweaking (#4096)Libravatar kim2
2025-04-29[chore] tweak NoLLaMas proof-of-work algorithm (#4090)Libravatar kim3
2025-04-28[feature] proof of work scraper deterrence (#4043)Libravatar kim3
2025-04-27[chore] Rewrite all remaining Github linksLibravatar Daenney1
2025-04-26[feature] Move to code.superseriousbusiness.orgLibravatar Daenney16
2025-04-25[chore] Move deps to code.superseriousbusiness.org (#4054)Libravatar tobi2
2025-03-02[chore] migrate oauth2 -> codeberg (#3857)Libravatar tobi1
2025-03-02[chore] github.com/superseriousbusiness/httpsig -> codeberg.org/superseriousb...Libravatar tobi1
2025-02-05[feature] Use `X-Robots-Tag` headers to instruct scrapers/crawlers (#3737)Libravatar tobi2
2025-01-27[chore] skip `trusted-proxies` warning if ip excepted from rate limiting (#3699)Libravatar tobi2
2024-10-16[chore] Upgrade golangci-lint, ignore existing int overflow warnings (#3420)Libravatar Markus Unterwaditzer3
2024-09-23[chore] header filter improvements (#3329)Libravatar kim1
2024-09-20[chore] ensure consistent caller name fetching regardless of compiler inlinin...Libravatar kim1
2024-08-02[feature] Beef up our AI opt-outs (#3165)Libravatar Daenney1
2024-07-04[feature] Set some security related headers (#3065)Libravatar Daenney2
2024-01-31[feature] Try HTTP signature validation with and without query params for inc...Libravatar tobi1
2024-01-09[feature] Log pubKeyID for http-signed requests (#2501)Libravatar tobi1
2024-01-03[bugfix] increases sleep time before check in throttle test, to give more lee...Libravatar kim1
2023-12-18[feature] request blocking by http headers (#2409)Libravatar kim5
2023-12-16[performance] simpler throttling logic (#2407)Libravatar kim3
2023-11-30[bugfix] return 400 Bad Request on more cases of malformed AS data (#2399)Libravatar kim1
2023-10-25[feature] attach any request errors if found, only set level=ERROR if code >=...Libravatar kim1
2023-08-23[feature] Add rate limit exceptions option, use ISO8601 for rate limit reset ...Libravatar tobi3
2023-08-20[feature/bugfix] Probe S3 storage for CSP uri, add config flag for extra URIs...Libravatar tobi3
2023-08-15[chore] ensure worker contexts have request ID (#2120)Libravatar kim1
2023-08-14[fix] Update CSP header for blob images (upload preview) and dev livereload (...v0.11.0-rc3Libravatar f0x522
2023-08-12[bugfix] CSP policy fixes for S3/object storage (#2104)Libravatar Daenney2
2023-08-11[bugfix] Add s3 endpoint as image-src and media-src for CSP (#2103)v0.11.0-rc2Libravatar tobi2
2023-08-11[feature] Set Content-Security-Policy header (#2095)Libravatar Daenney1
2023-08-10[performance] remove last of relational queries to instead rely on caches (#2...Libravatar kim1
2023-07-25[performance] retry db queries on busy errors (#2025)Libravatar kim1
2023-07-13[bugfix] Set Vary header correctly on cache-control (#1988)v0.10.0-rc2Libravatar tobi1
2023-06-13[chore] Refactor AP authentication, other small bits of tidying up (#1874)Libravatar tobi1
2023-06-02[bugfix] Overwrite API client closed errors with `499 - Client Closed Request...Libravatar tobi1
2023-05-21[chore] Replace pinafore with semaphore (#1801)Libravatar Julian-Samuel Gebühr1
2023-05-21[feature] Make client IP logging configurable (#1799)Libravatar Daenney1
2023-05-09feat: initial tracing support (#1623)Libravatar Dominik Süß1
2023-04-28[performance] improved request batching (removes need for queueing) (#1687)Libravatar kim2
2023-04-03[bugfix] Add idempotency-key to allowed CORS headers (#1670)Libravatar tobi1