discours.io/core
5
0
Fork 0
Code Pull Requests Actions Projects Activity
3,533 Commits 10 Branches 0 Tags
bd54d900aa6c7d951ec7716e35c2f13b96753ba2
Commit Graph

77 Commits

Author SHA1 Message Date
Untone
bd54d900aa separate-codegen-fix2
Some checks failed
Deploy on push / deploy (push) Failing after 32s
Details
2025-09-27 13:56:10 +03:00
Untone
eab0ba7b42 separate-codegen-fix
Some checks failed
Deploy on push / deploy (push) Failing after 30s
Details
2025-09-27 13:53:00 +03:00
Untone
2ac983d81e nodiag
Some checks failed
Deploy on push / deploy (push) Failing after 36s
Details
2025-09-27 13:47:26 +03:00
Untone
853ed77083 ci-diagnostic
Some checks failed
Deploy on push / deploy (push) Failing after 34s
Details
2025-09-27 13:28:51 +03:00
Untone
03626ec20d panelfix
Some checks failed
Deploy on push / deploy (push) Failing after 31s
Details
2025-09-27 13:20:56 +03:00
Untone
05c188df62 [0.9.29] - 2025-09-26
Some checks failed
Deploy on push / deploy (push) Failing after 39s
Details 
### 🚨 CRITICAL Security Fixes
- **🔒 Open Redirect Protection**: Добавлена строгая валидация redirect_uri против whitelist доменов
- **🔒 Rate Limiting**: Защита OAuth endpoints от брутфорса (10 попыток за 5 минут на IP)
- **🔒 Logout Endpoint**: Критически важный endpoint для безопасного отзыва httpOnly cookies
- **🔒 Provider Validation**: Усиленная валидация OAuth провайдеров с логированием атак
- **🚨 GlitchTip Alerts**: Автоматические алерты безопасности в GlitchTip при критических событиях

### 🛡️ Security Modules
- **auth/oauth_security.py**: Модуль безопасности OAuth с валидацией и rate limiting + GlitchTip алерты
- **auth/logout.py**: Безопасный logout с поддержкой JSON API и browser redirect
- **tests/test_oauth_security.py**: Комплексные тесты безопасности (11 тестов)
- **tests/test_oauth_glitchtip_alerts.py**: Тесты интеграции с GlitchTip (8 тестов)

### 🔧 OAuth Improvements
- **Minimal Flow**: Упрощен до минимума - только httpOnly cookie, нет JWT в URL
- **Simple Logic**: Нет error параметра = успех, максимальная простота
- **DRY Refactoring**: Устранено дублирование кода в logout и валидации

### 🎯 OAuth Endpoints
- **Старт**: `v3.dscrs.site/oauth/{provider}` - с rate limiting и валидацией
- **Callback**: `v3.dscrs.site/oauth/{provider}/callback` - безопасный redirect_uri
- **Logout**: `v3.dscrs.site/auth/logout` - отзыв httpOnly cookies
- **Финализация**: `testing.discours.io/oauth?redirect_url=...` - минимальная схема

### 📊 Security Test Coverage
- ✅ Open redirect attack prevention
- ✅ Rate limiting protection
- ✅ Provider validation
- ✅ Safe fallback mechanisms
- ✅ Cookie security (httpOnly + Secure + SameSite)
- ✅ GlitchTip integration (8 тестов алертов)

### 📝 Documentation
- Создан `docs/oauth-minimal-flow.md` - полное описание минимального flow
- Обновлена документация OAuth в `docs/auth/oauth.md`
- Добавлены security best practices
 2025-09-26 21:03:45 +03:00
Untone
9d6ac671d5 mypy-ci-fix2
Some checks failed
Deploy on push / deploy (push) Failing after 7m30s
Details
2025-09-16 12:08:42 +03:00
Untone
37d502801a mypy-ci-fix
Some checks failed
Deploy on push / deploy (push) Failing after 3m59s
Details
2025-09-16 11:59:57 +03:00
Untone
4ea32e3b83 panel minor fixes
Some checks failed
Deploy on push / deploy (push) Failing after 4m20s
Details
2025-09-16 11:49:24 +03:00
Untone
69102bb908 cifix
Some checks failed
Deploy on push / deploy (push) Failing after 3m15s
Details
2025-09-03 13:01:38 +03:00
Untone
43f0114769 deploy-fixed
All checks were successful
Deploy on push / deploy (push) Successful in 7m11s
Details
2025-08-28 21:02:20 +03:00
Untone
e6f9b877f4 deploy-fix2
All checks were successful
Deploy on push / deploy (push) Successful in 6m53s
Details
2025-08-28 20:53:31 +03:00
Untone
b0d60bb836 deploy-fix
Some checks failed
Deploy on push / deploy (push) Failing after 3m36s
Details
2025-08-28 20:48:15 +03:00
Untone
d677d6547c debug-improved
Some checks failed
Deploy on push / deploy (push) Failing after 3m44s
Details
2025-08-28 20:19:30 +03:00
Untone
e78e12eeee circular-fix
Some checks failed
Deploy on push / deploy (push) Failing after 17s
Details
2025-08-17 16:33:54 +03:00
Untone
81b2ec41fa ci-tests-frontend-e2e-fix
Some checks failed
Deploy on push / deploy (push) Has been cancelled
Details
2025-08-12 14:45:59 +03:00
Untone
31376b3dac headless-tests-ci-fix3
Some checks failed
Deploy on push / deploy (push) Failing after 33s
Details
2025-08-12 14:31:25 +03:00
Untone
3f212992a0 headless-tests-ci-fix2
Some checks failed
Deploy on push / deploy (push) Failing after 1m51s
Details
2025-08-12 14:07:02 +03:00
Untone
a2177bc35a headless-tests-ci-fix
Some checks failed
Deploy on push / deploy (push) Failing after 11s
Details
2025-08-12 14:03:56 +03:00
Untone
16d911bf1e headless
Some checks failed
Deploy on push / deploy (push) Has been cancelled
Details
2025-08-12 14:00:12 +03:00
Untone
2eeabae847 devgroup
Some checks failed
Deploy on push / deploy (push) Failing after 14s
Details
2025-08-12 13:19:55 +03:00
Untone
663942c41e feat: migrate to uv package manager 
- Add pyproject.toml with project configuration
- Update requirements.txt and requirements.dev.txt with versions
- Add .uv configuration file
- Update .gitignore for uv
- Update README with uv instructions
- Configure hatchling build system
- Add mypy configuration
- Test uv sync and pytest integration
 2025-08-12 13:12:39 +03:00
Untone
333dc19020 ci-upgrade3
Some checks failed
Deploy on push / deploy (push) Failing after 4s
Details
2025-08-12 13:06:53 +03:00
Untone
573fa29aa6 ci-upgrade2
Some checks failed
Deploy on push / deploy (push) Failing after 5s
Details
2025-08-12 13:05:41 +03:00
Untone
8b93ce0f63 ci-upgrade
Some checks failed
Deploy on push / deploy (push) Failing after 5s
Details
2025-08-12 13:04:12 +03:00
Untone
047d7e658f ci: update workflow to use dokku action for dev branch deployment 2025-08-12 12:57:05 +03:00
Untone
6f7be9e38c fix-deploy
Some checks failed
Deploy on push / deploy (push) Failing after 5s
Details
2025-08-12 12:49:48 +03:00
Untone
2b1c3c2569 chore: remove pre-commit configuration and dependencies 2025-08-12 12:48:09 +03:00
Untone
cb946fb30e roles-editor-fix 2025-07-25 10:09:01 +03:00
Untone
fed6d51af0 deploy-fix2
Some checks failed
Deploy on push / deploy (push) Failing after 5s
Details
2025-07-25 01:17:23 +03:00
Untone
ff2e5b6735 deploy-fix
Some checks failed
Deploy on push / deploy (push) Failing after 4s
Details
2025-07-25 01:08:03 +03:00
Untone
1710fce600 nochecks1
All checks were successful
Deploy on push / deploy (push) Successful in 7s
Details
2025-06-03 01:14:51 +03:00
Untone
6ab76a9754 nochecks
Some checks are pending
Deploy on push / deploy (push) Blocked by required conditions
Details
2025-06-03 01:13:51 +03:00
Untone
6689847c0e img
Some checks are pending
Deploy on push / type-check (push) Waiting to run
Details
Deploy on push / deploy (push) Blocked by required conditions
Details
2025-06-03 01:13:13 +03:00
Untone
17b6069fb2 dplfix
Some checks failed
Deploy on push / type-check (push) Failing after 7s
Details
Deploy on push / deploy (push) Has been skipped
Details
2025-06-03 01:11:28 +03:00
Untone
f00eea2c31 тщмук
Some checks failed
Deploy on push / type-check (push) Failing after 8s
Details
Deploy on push / deploy (push) Has been skipped
Details
2025-06-03 01:09:29 +03:00
Untone
9555cc3125 311-str
Some checks failed
Deploy on push / type-check (push) Failing after 7s
Details
Deploy on push / deploy (push) Has been skipped
Details
2025-06-03 01:08:26 +03:00
Untone
b97912c3c4 311
Some checks failed
Deploy on push / type-check (push) Failing after 7s
Details
Deploy on push / deploy (push) Has been skipped
Details
2025-06-03 01:06:09 +03:00
Untone
8d410fcac3 312
Some checks failed
Deploy on push / type-check (push) Failing after 34s
Details
Deploy on push / deploy (push) Has been skipped
Details
2025-06-03 01:03:58 +03:00
Untone
5e370eef95 3133
Some checks failed
Deploy on push / type-check (push) Failing after 6s
Details
Deploy on push / deploy (push) Has been skipped
Details
2025-06-03 01:02:46 +03:00
Untone
b905ba59e4 311
Some checks failed
Deploy on push / type-check (push) Failing after 8s
Details
Deploy on push / deploy (push) Has been skipped
Details
2025-06-03 01:01:45 +03:00
Untone
ba21a4b920 deply-fix
Some checks failed
Deploy on push / type-check (push) Failing after 14s
Details
Deploy on push / deploy (push) Has been skipped
Details
2025-06-03 00:58:07 +03:00
Untone
3327976586 Improve topic sorting: add popular sorting by publications and authors count 2025-06-02 02:56:11 +03:00
Stepan Vladovskiy
59e71c8144 debug: fixed workflows gitea
All checks were successful
Deploy on push / deploy (push) Successful in 4m41s
Details
2025-03-05 20:17:34 +00:00
Stepan Vladovskiy
e6a416383d debug: fixed workflows gitea
All checks were successful
Deploy on push / deploy (push) Successful in 15s
Details
2025-03-05 20:16:32 +00:00
Stepan Vladovskiy
d55448398d feat(search.py): change to txtai server, with ai model. And fix granian workers 2025-03-05 20:08:21 +00:00
Stepan Vladovskiy
a218d1309b debug: no force optins and simpl regexp logic
All checks were successful
Deploy on push / deploy (push) Successful in 59s
Details
2025-01-28 18:24:10 -03:00
Stepan Vladovskiy
113d4807b2 feat:sv with force flag
All checks were successful
Deploy on push / deploy (push) Successful in 1m2s
Details
2025-01-28 17:55:41 -03:00
Stepan Vladovskiy
04a0a6ddf4 debug: Sigil back to map with only discours.io domain
All checks were successful
Deploy on push / deploy (push) Successful in 56s
Details
2024-12-20 14:35:59 -03:00
Untone
dd60d1a1c4 deployfix
All checks were successful
Deploy on push / deploy (push) Successful in 5s
Details
2024-11-01 14:33:34 +03:00