Commits

Breadcrumbs

History for

onlenient-auth

User selector

All users

All time

Commit history

Commits on Jan 5, 2026

• v0.0.61 - Add ActivityPub federation support

  Show description for 0928e63
  melvincarvalho

  committed
  0928e63

  Copy full SHA for 0928e63

• Add bcryptjs fallback for Android/Termux support

  Show description for 7d36be1
  melvincarvalho

  committed
  7d36be1

  Copy full SHA for 7d36be1

• Fix git clone from root path

  melvincarvalho

  committed
  a56c1c8

  Copy full SHA for a56c1c8

• Add Nostr relay integration (Fonstr)

  Show description for 286c1e2
  melvincarvalho

  committed
  286c1e2

  Copy full SHA for 286c1e2

Commits on Jan 4, 2026

• Make HTTP Auth more lenient: optional method tag and id field

  Show description for 9346928
  melvincarvalho

  committed
  9346928

  Copy full SHA for 9346928

Commits on Jan 3, 2026

• Add did:nostr to WebID resolution

  Show description for 21e3b79
  melvincarvalho

  committed
  21e3b79

  Copy full SHA for 21e3b79

• v0.0.57 - Storage quotas MVP

  Show description for a7c936e
  melvincarvalho

  committed
  a7c936e

  Copy full SHA for a7c936e

• Add invite-only registration system

  Show description for 37c6426
  melvincarvalho

  committed
  37c6426

  Copy full SHA for 37c6426

• v0.0.55 - Add secure cookie flag for HTTPS

  Show description for f7bffe0
  melvincarvalho

  committed
  f7bffe0

  Copy full SHA for f7bffe0

• v0.0.54 - Fix SSRF false positive for own issuer

  Show description for 02095ba
  melvincarvalho

  committed
  02095ba

  Copy full SHA for 02095ba

• v0.0.53 - Stricter pod creation rate limit

  Show description for 33a14e8
  melvincarvalho

  committed
  33a14e8

  Copy full SHA for 33a14e8

• v0.0.52 - Security hardening

  Show description for 3bfd663
  melvincarvalho

  committed
  3bfd663

  Copy full SHA for 3bfd663

• v0.0.51 - Rate limiting and token security

  Show description for 1d4e30b
  melvincarvalho

  committed
  1d4e30b

  Copy full SHA for 1d4e30b

• v0.0.50 - SSRF protection

  Show description for 0304603
  melvincarvalho

  committed
  0304603

  Copy full SHA for 0304603

• v0.0.49 - Critical security fixes

  Show description for a052003
  melvincarvalho

  committed
  a052003

  Copy full SHA for a052003

• Security: Change default WAC mode from permissive to restrictive

  Show description for f43ecdf
  melvincarvalho

  committed
  f43ecdf

  Copy full SHA for f43ecdf

Commits on Jan 2, 2026

• Fix git CORS: add Authorization header and explicit content-type parsers

  melvincarvalho

  committed
  af260e4

  Copy full SHA for af260e4

• Add OPTIONS preflight handling for git CORS

  melvincarvalho

  committed
  e766647

  Copy full SHA for e766647

• Add CORS headers to git HTTP backend

  Show description for f52813f
  melvincarvalho

  committed
  f52813f

  Copy full SHA for f52813f

Commits on Jan 1, 2026

• Fix git auto-config: use execSync and check full URL

  Show description for db961cf
  melvincarvalho

  committed
  db961cf

  Copy full SHA for db961cf

• Auto-configure git repos for push with updateInstead

  Show description for 7651a11
  melvincarvalho

  committed
  7651a11

  Copy full SHA for 7651a11

• Fix git auto-checkout with absolute paths

  Show description for 44a5e06
  melvincarvalho

  committed
  44a5e06

  Copy full SHA for 44a5e06

• Fix git auto-checkout by setting GIT_WORK_TREE

  melvincarvalho

  committed
  4443b93

  Copy full SHA for 4443b93

• Auto-checkout working directory after git push

  Show description for 8159c57
  melvincarvalho

  committed
  8159c57

  Copy full SHA for 8159c57

• Don't override WAC-Allow in getAllHeaders if hook already set it

  melvincarvalho

  committed
  ae1d366

  Copy full SHA for ae1d366

• Fix WAC hierarchy walk for subdomain mode

  Show description for 4f53d80
  melvincarvalho

  committed
  4f53d80

  Copy full SHA for 4f53d80

• Set WAC-Allow header in auth hook for all authorized requests

  melvincarvalho

  committed
  531ab62

  Copy full SHA for 531ab62

• Fix WAC checker to pass ACL URL (not path) to parser

  Show description for a1204d1
  melvincarvalho

  committed
  a1204d1

  Copy full SHA for a1204d1

• Resolve relative URLs in WAC ACL parser

  Show description for a736338
  melvincarvalho

  committed
  a736338

  Copy full SHA for a736338

• Fix git push: check service=git-receive-pack in query string

  melvincarvalho

  committed
  97497b7

  Copy full SHA for 97497b7

• Fix tests and update README for v0.0.39

  Show description for f5aad20
  melvincarvalho

  committed
  f5aad20

  Copy full SHA for f5aad20

• Fix git push authentication with Nostr credentials

  Show description for 943897c
  melvincarvalho

  committed
  943897c

  Copy full SHA for 943897c

• Add Nostr auth support for git push via Basic Auth

  Show description for 55a7ed3
  melvincarvalho

  committed
  55a7ed3

  Copy full SHA for 55a7ed3

• Add Git HTTP backend support for clone/push

  Show description for 859587a
  melvincarvalho

  committed
  859587a

  Copy full SHA for 859587a

• Security: Block access to dotfiles (.git, .env, etc.)

  Show description for a6fe878
  melvincarvalho

  committed
  a6fe878

  Copy full SHA for a6fe878