596 Commits

Author SHA1 Message Date
Cohee
60448f4ce8 Move security checks to users.js 2025-02-27 21:27:39 +02:00
Cohee
a20928b02c Fix class method bind. Await open promise 2025-02-26 20:19:32 +02:00
Cohee
b64273ab94 Fix comments, update function interfaces 2025-02-26 15:36:01 +00:00
Cohee
e7fcd0072b Refactor server startup 2025-02-26 14:46:54 +00:00
Cohee
a73dfa7586 Merge branch 'staging' into immutable-config 2025-02-22 20:15:13 +02:00
Cohee
3e26b93971 Do not register whitelist middleware if whitelist disabled 2025-02-22 14:14:40 +02:00
Cohee
b12cd9fe05 Merge branch 'staging' into feature/access-log-middleware 2025-02-22 13:49:36 +02:00
Cohee
d32adb8d1d Fix requestProxyBypass command line default value
Closes #3528
2025-02-21 23:07:33 +02:00
KevinSun
f755c3d4cb
refactor(middleware): rename accessLogger to accessLogWriter 2025-02-21 23:56:31 +08:00
KevinSun
9c3e8c935b
refactor(Middleware): only mount accessLogger when listen is enabled 2025-02-21 23:49:15 +08:00
KevinSun
bfc609c2a8
fix(middleware): skip New connection message and access.log writes for localhost 2025-02-21 22:17:12 +08:00
KevinSun
db500188d8
feat(middleware): add separate access log middleware with config option 2025-02-21 20:32:23 +08:00
Cohee
00bb36f764 Fix setting basic auth creds with env 2025-02-20 22:38:47 +02:00
Cohee
2b28065c9f Fix setting protocols with env 2025-02-20 22:28:30 +02:00
Cohee
3f03936125 Add config value type converters for numbers and booleans 2025-02-20 21:53:48 +02:00
Cohee
f6fe5fea77 Allow overriding config.yaml values with env vars
Closes #3520
2025-02-20 20:29:42 +02:00
Cohee
7ea2c5f8cf Move cookie secret to data root. Make config.yaml immutable 2025-02-20 20:16:44 +02:00
Cohee
3d8a897c19 Auto-extend session cookie every 30 minutes 2025-02-19 23:42:28 +02:00
Cohee
da3b620f74 Move access.log to data root 2025-02-17 22:58:06 +02:00
Cohee
bae02a44ed Add cache buster middleware to clear browser cache on server restart 2025-02-15 12:56:43 +02:00
Cohee
dbbf069e85 Remove message redundancy 2025-02-14 23:53:31 +02:00
Cohee
c98d241f3c Refactor logAddress check 2025-02-14 23:09:36 +02:00
Kristan Schlikow
961a71877b
Remove extra resolve for autorun 2025-02-14 22:02:16 +01:00
Kristan Schlikow
f5bfbce0ad
Group listenAddress for config 2025-02-14 20:04:23 +01:00
Kristan Schlikow
a4c124dff0
Remove dead code 2025-02-14 20:00:15 +01:00
Kristan Schlikow
2445b6d9dc
Split up listen address configuration between IPv4 and IPv6 2025-02-14 19:58:59 +01:00
Kristan Schlikow
ad8f0f564f
Use IP Regex package, update default 2025-02-14 19:06:07 +01:00
Kristan Schlikow
dd55b2770a
Address issues with IPv6 binding 2025-02-13 23:51:18 +01:00
Kristan Schlikow
83f74a5d22
Allow user to configure an address to listen to 2025-02-13 23:43:10 +01:00
Cohee
5f564343ec Remove console log 2025-02-04 23:14:01 +02:00
Cohee
dfb062af41 Clean-uo blank lines 2025-02-04 22:52:07 +02:00
Cohee
d9bb5e6b1f Revert old default values 2025-02-04 22:46:24 +02:00
Cohee
363d8a4121 Merge branch 'staging' into ipv6_auto 2025-02-04 22:45:46 +02:00
Eradev
552a418bae Merge branch 'staging' into staging-3071-v2 2025-01-28 10:49:53 -05:00
Cohee
c9a1a3eb94
Merge pull request #3351 from SillyTavern/csrf-sync
Replace CSRF middleware
2025-01-25 23:23:43 +02:00
Cohee
44ade6ad64 Customize CSRF token error message 2025-01-25 23:20:26 +02:00
Spappz
6099ffece1
No exceptions on missing error webpages
- Create a `safeReadFileSync()` function in `src/utils.js` to wrap around `fs.readFileSync()`
- Migrate error-webpage loads to use `safeReadFileSync()`, with default values of an empty string
- Move the 404 error middleware to explicitly only be called *after* extensions are registered
2025-01-25 20:29:31 +00:00
Cohee
5ff402aabf Replace CSRF middleware
Closes #3349
2025-01-25 16:56:11 +02:00
Spappz
a5dc505e61
add 404 error-handling to server
This is all that seems necessary according to Express? Admittedly my first time using it.
https://expressjs.com/en/starter/faq.html#how-do-i-handle-404-responses
2025-01-25 03:42:04 +00:00
Eradev
1f9fa74786 Rewritten minLogLevel feature 2025-01-15 10:02:32 -05:00
BPplays
d769798ba3 replaced some jsdoc with assigning false by default 2025-01-12 22:39:42 -08:00
BPplays
faaa4ba6bc changed formatting 2025-01-10 03:58:15 -08:00
BPplays
aa10dd98c9 more jsdoc stuff 2025-01-10 02:56:00 -08:00
BPplays
9f98bee362 foramtting 2025-01-09 19:42:27 -08:00
BPplays
f372e1a69d more jsdoc stuff 2025-01-09 19:09:55 -08:00
BPplays
5b5b9a91aa more jsdoc stuff 2025-01-09 18:44:48 -08:00
BPplays
b43ac187ec formatting changes 2025-01-09 18:27:21 -08:00
BPplays
adc5940d15 formatting changes 2025-01-09 18:17:02 -08:00
BPplays
45e7edc9b8 formatting 2025-01-09 07:35:17 -08:00
BPplays
874127a4f9 lint 2025-01-09 07:30:50 -08:00