feature/JWT #1

Merged
bpeskiewicz merged 3 commits from feature/JWT into main 2026-04-03 20:52:06 +00:00
Owner
No description provided.
- Add Basic HTTP auth middleware with timing-safe comparison
- Add IP-based rate limiting with periodic cleanup
- Wire auth and rate limiting to /api routes
- Refactor routes with asyncHandler and input validation
- Fix path traversal via symlinks and Windows case normalization
- Optimize directory listing by paginating before stat-ing
Replace HTTP Basic Auth with cookie-based JWT authentication.
Adds a Vue login modal, login/logout API endpoints, and 401
handling in the file browser composable. Also adds a multi-stage
Dockerfile and Forgejo CI workflow for automated releases.
bpeskiewicz deleted branch feature/JWT 2026-04-03 20:52:07 +00:00
bpeskiewicz referenced this pull request from a commit 2026-04-03 20:52:09 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
bpeskiewicz/file-gateway!1
No description provided.