kittybox - An IndieWeb-centric blogging engine designed for self-hosting

	Commit message (Collapse)	Author	Age	Files	Lines
*	Small tweaks, additions and preparations	Vika	2022-02-21	1	-9/+3
\|
*	Make the HTTP client a generic	Vika	2022-02-21	1	-7/+5
\| \| \| \| \| \|	This adds the ability to use mocks that don't actually touch the network and alternative transports such as using OpenSSL instead of rustls (but rustls is still superior).
*	indieauth/require_token(): reject with 401 when no header	Vika	2022-02-21	1	-2/+34
\|
*	Add a module for IndieAuth bearer token auth	Vika	2022-02-21	1	-201/+245
\| \| \| \| \| \| \| \| \| \| \| \| \|	require_token() uses a token endpoint URI and an HTTP client to query the token endpoint and return a User object if the user was authorized, or rejecting with IndieAuthError if not. It is recommended to use recover() and catch the IndieAuthError at the application level to show a "not authorized" error message to the user. This function is more intended for API consumption, but is general enough to permit using in other scenarios. TODO: make a variant that returns Option<User> instead of rejecting
*	Appease rustfmt, clippy and cargo check	Vika	2021-07-29	1	-8/+17
\|
*	Added an internal token mechanism	Vika Shleina	2021-07-27	1	-0/+11
\| \| \| \| \| \| \| \|	The internal token is a shared secret that can update and delete any posts stored in the database. It is intended for use in webmention endpoints to update posts with latest webmentions. Please keep it safe.
*	Replaced scheme with HTTPS in frontend to prevent weird things	Vika Shleina	2021-07-19	1	-1/+1
\|
*	Make clippy happy	Vika	2021-05-17	1	-1/+1
\|
*	Make rustfmt happy	Vika	2021-05-17	1	-28/+71
\|
*	Added a debug shim to IndieAuthMiddleware that makes it a no-op in staging ↵	Vika	2021-05-09	1	-1/+15
\| \| \| \|	(except unit tests)
*	Added rudimentary caching to IndieAuth middleware	Vika	2021-05-05	1	-27/+83
\|
*	Deleted a loose TODO	Vika	2021-05-05	1	-1/+0
\|
*	Initial commit	Vika	2021-05-04	1	-0/+116
	Working features: - Sending posts from the database - Reading posts from the database - Responding with MF2-JSON (only in debug mode!) - Not locking the database when not needed - All database actions are atomic (except for a small race where UIDs can clash, but that's not gonna happen often) TODOs: - Send webmentions - Send syndication requests - Send WebSub notifications - Make tombstones for deleted posts (update adding dt-deleted) - Rich reply contexts (possibly on the frontend part?) - Frontend? - Fix UID race Code maintenance TODOs: - Split the database module - Finish implementing the in-memory test database - Make RedisDatabase unit tests launch their own Redis instances (see redis-rs/tests/support/mod.rs for more info) - Write more unit-tests!!!