8 Commits

Author	SHA1	Message	Date
WeebDataHoarder	163fce6cfc	challenge/resource-load: use proper redirect URL to current issued challenge, add static/dynamic cache bust	2025-05-13 23:43:31 +02:00
WeebDataHoarder	0e62f80f9b	challenges: prevent unbounded growth of stored cookies by bundling all state onto a single JWT token	2025-05-03 17:30:39 +02:00
WeebDataHoarder	666ffa574a	challenge: implement IPv6 Happy Eyeballs again, use errors to detect this within challenge, cleanup referrer tags	2025-04-27 18:49:58 +02:00
WeebDataHoarder	c5ad9cdf03	context: add CONTEXT action to apply options on current request	2025-04-27 17:20:57 +02:00
WeebDataHoarder	01ef63abea	challenge: quote expected challenge name on error	2025-04-25 23:20:53 +02:00
WeebDataHoarder	3bbd50764a	challenge: add cookie prefix to cookies tied to host/pubkey to prevent reuse	2025-04-23 22:38:14 +02:00
WeebDataHoarder	cef915b353	http: use Query.Get instead of FormValue, allows POST through	2025-04-23 21:30:39 +02:00
WeebDataHoarder	ead41055ca	Condition, rules, state and action refactor / rewrite ... Add nested rules Add backend action, allow wildcard in backends Remove poison from tree, update README with action table Allow defining pass/fail actions on challenge, Remove redirect/referer parameters on backend pass Set challenge cookie tied to host Rewrite DNSBL condition into a challenge Allow passing an arbitrary path for assets to js challenges Optimize programs exhaustively on compilation Activation instead of map for CEL context, faster map access, new network override Return valid host on cookie setting in case Host is an IP address. bug: does not work with IPv6, see https://github.com/golang/go/issues/65521 Apply TLS fingerprinter on GetConfigForClient instead of GetCertificate Cleanup go-away cookies before passing to backend Code action for specifically replying with an HTTP code	2025-04-23 20:35:20 +02:00