 s1d3sw1ped_bot
|
13070a275d
|
Lock bootstrap admin token until password is changed.
Format / gofmt (push) Successful in 7s
CI / Build (push) Successful in 14s
Format / gofmt (pull_request) Successful in 7s
CI / Build (pull_request) Successful in 13s
CI / Go Tests (push) Successful in 50s
CI / Go Tests (pull_request) Successful in 48s
Closes #2: bootstrap JWTs cannot mutate admin APIs except change-password, production requires ADMIN_PASSWORD on first boot, admin binds loopback.
|
2026-09-01 03:54:09 +00:00 |
|
|
s1d3sw1ped_bot
|
22844a2a67
|
Persist a per-install JWT signing secret instead of a compiled-in default.
Format / gofmt (push) Successful in 8s
Format / gofmt (pull_request) Successful in 9s
CI / Build (push) Successful in 24s
CI / Build (pull_request) Successful in 25s
CI / Go Tests (pull_request) Successful in 39s
CI / Go Tests (push) Successful in 40s
Admin tokens were forgeable whenever JWT_SECRET was unset. Prefer the env var, otherwise write a random key to data/.jwt_secret.
|
2026-08-31 23:55:34 +00:00 |
|
 s1d3sw1ped
|
466d69c44c
|
make fmt
Format / gofmt (push) Successful in 7s
CI / Build (push) Successful in 14s
CI / Go Tests (push) Successful in 28s
|
2026-06-08 00:39:41 -05:00 |
|
|
s1d3sw1ped
|
1cc94f2c99
|
initial commit
Format / gofmt (push) Failing after 27s
CI / Build (push) Successful in 51s
CI / Go Tests (push) Failing after 21s
|
2026-06-06 07:54:44 -05:00 |
|