cgit - cgit is the backbone of git.syndamia.com. This repository contains changes which are used in the website itself.

	Commit message (Collapse)	Author	Age	Lines	SHA
*	filters: migrate from luacrypto to luaossl	Jason A. Donenfeld	2019-01-03	-12/+19	7d87cd3
\| \| \| \| \| \| \|	luaossl has no upstream anymore and doesn't support OpenSSL 1.1, whereas luaossl is quite active. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
*	auth-filters: use crypt() in simple-authentication	Jason A. Donenfeld	2018-07-15	-13/+6	8285692
\| \| \| \| \| \| \|	There's no use in giving a silly example to folks who will just copy it, so instead try to do something slightly better. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
*	auth-filters: generate secret securely	Jason A. Donenfeld	2018-07-15	-8/+42	b73df80
\| \| \| \| \| \|	This is much better than having the user generate it themselves. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
*	auth-filters: do not use HMAC-SHA1	Jason A. Donenfeld	2018-07-14	-2/+2	c3b5b5f
\| \| \| \| \| \| \|	Though SHA1 is broken, HMAC-SHA1 is still fine. But let's not push our luck; SHA256 is more sensible anyway. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
*	simple-authentication.lua: tie secure cookies to field names	Jason A. Donenfeld	2015-03-05	-13/+21	ecd6b72
\|
*	simple-authentication: style	Jason A. Donenfeld	2014-01-23	-1/+1	aa6d5b1
\| \| \| \|	Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
*	auth: document tweakables in lua script	Jason A. Donenfeld	2014-01-17	-0/+10	9dde6d3
\| \| \| \|	Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
*	auth: have cgit calculate login address	Jason A. Donenfeld	2014-01-16	-6/+1	a431326
\| \| \| \| \| \| \|	This way we're sure to use virtual root, or any other strangeness encountered. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
*	auth: lua string comparisons are time invariant	Jason A. Donenfeld	2014-01-16	-2/+2	df00ab1
\| \| \| \| \| \|	By default, strings are compared by hash, so we can remove this comment. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
*	authentication: use hidden form instead of referer	Jason A. Donenfeld	2014-01-16	-79/+121	b826537
\| \| \| \| \| \| \|	This also gives us some CSRF protection. Note that we make use of the hmac to protect the redirect value. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
*	auth: add basic authentication filter framework	Jason A. Donenfeld	2014-01-16	-0/+225	d6e9200
	This leverages the new lua support. See filters/simple-authentication.lua for explaination of how this works. There is also additional documentation in cgitrc.5.txt. Though this is a cookie-based approach, cgit's caching mechanism is preserved for authenticated pages. Very plugable and extendable depending on user needs. The sample script uses an HMAC-SHA1 based cookie to store the currently logged in user, with an expiration date. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>