 Edouard Vanbelle
|
6a434aebe6
|
refactor(dpop): apply clippy
|
2026-08-09 11:46:51 +02:00 |
|
|
Edouard Vanbelle
|
1b9d812175
|
feat(telemetry): add /metrics prommetheus exporter
|
2026-08-09 10:41:34 +02:00 |
|
|
Edouard Vanbelle
|
80f2f67db6
|
feat(dpop): server request dpop on all /api/*
|
2026-08-09 10:35:52 +02:00 |
|
|
Edouard Vanbelle
|
d0712817c5
|
refactor(dpop): apply clippy
|
2026-08-09 02:18:02 +02:00 |
|
|
Edouard Vanbelle
|
34d80d70b8
|
feat(dpop): release route that must not dpop protected (temp version)
|
2026-08-09 01:56:13 +02:00 |
|
|
Edouard Vanbelle
|
82bd2e4d22
|
fix(dpop): do not sign GET /... tumbnail/images/ basic assets
no need sign this simole GET to this simplify
an hijacked session could retreive these assets but cannot get the list of them
|
2026-08-09 01:56:08 +02:00 |
|
|
Edouard Vanbelle
|
8d6e03a4bb
|
feat(DPoP): check requests and 401 on failure
|
2026-08-09 01:56:07 +02:00 |
|
|
Edouard Vanbelle
|
5c4354bc67
|
feat(DPoP): add anti replay cache
|
2026-08-09 01:56:07 +02:00 |
|
|
Edouard Vanbelle
|
2e6789e506
|
feat(DPoP): add verification + X-Forwarded-Host X-Forwarded-Proto
|
2026-08-09 01:56:07 +02:00 |
|