caddy-cgi - fork of caddy for nix to build it with the cgi plugin

Age	Commit message (Collapse)	Author
2020-10-31	caddyauth: Prevent user enumeration by timing	Matthew Holt
	Always follow the code path of hashing and comparing a plaintext password even if the account is not found by the given username; this ensures that similar CPU cycles are spent for both valid and invalid usernames. Thanks to @tylerlm for helping and looking into this!
2020-07-17	caddyauth: hash-password: Set bcrypt cost to 14 (#3580)	Matthew Holt

2020-06-11	caddyhttp: Add client cert SAN placeholders	Matthew Holt

2020-06-01	caddyauth: Cache basicauth results (fixes #3462) (#3465)	Matt Holt
	Cache capacity is currently hard-coded at 1000 with random eviction. It is enabled by default from Caddyfile configurations because I assume this is the most common preference.
2020-05-21	cmd: hash-password: Fix broken terminal state on SIGINT (#3416)	Francis Lavoie
	* caddyauth: Fix hash-password broken terminal state on SIGINT * caddycmd: Move TrapSignals calls to only subcommands that run long
2020-05-18	caddyauth: Add realm to basicauth Caddyfile directive (#3315)	Francis Lavoie

2020-05-11	cmd: hash-password: Support reading from stdin (#3373)	Andrew Zhou
	Closes #3365 * http: Add support in hash-password for reading from terminals/stdin * FIXUP: Run gofmt -s * FIXUP * FIXUP: Apply suggestions from code review Co-authored-by: Matt Holt <mholt@users.noreply.github.com> * FIXUP Co-authored-by: Matt Holt <mholt@users.noreply.github.com>
2020-04-14	httpcaddyfile: Don't lowercase placeholder contents (fixes #3264)	Matthew Holt

2020-04-08	chore: make the linter happier (#3245)	Mohammed Al Sahaf
	* chore: make the linter happier * chore: remove reference to maligned linter in .golangci.yml
2020-04-07	basicauth: Re-prompt after invalid credentials (fix #3239) (#3240)	Matt Holt

2020-03-27	caddyauth: Add Metadata field to caddyauth.User (#3174)	Robin Lambertz
	* caddyauth: Add Metadata field to caddyauth.User * Apply gofmt * Tidy it up a bit Co-authored-by: Matthew Holt <mholt@users.noreply.github.com>
2020-02-17	basicauth: default hash to bcrypt (#3050)	Robin Lambertz
	The documentation specifies that the hash algorithm defaults to bcrypt. However, the implementation returns an error in provision if no hash is provided. Fix this inconsistency by actually defaulting to bcrypt.
2020-01-07	basicauth: Accept placeholders; move base64 decoding to provision	Matthew Holt
	See https://caddy.community/t/v2-basicauth-bug/6738?u=matt
2019-12-29	Export Replacer and use concrete type instead of interface	Matthew Holt
	The interface was only making things difficult; a concrete pointer is probably best.
2019-12-23	Improve godocs all around	Matthew Holt
	These will be used in the new automated documentation system
2019-12-12	Minor improvements; comments and shorter placeholders & module IDs	Matthew Holt

2019-12-10	v2: Module documentation; refactor LoadModule(); new caddy struct tags (#2924)	Matt Holt
	This commit goes a long way toward making automated documentation of Caddy config and Caddy modules possible. It's a broad, sweeping change, but mostly internal. It allows us to automatically generate docs for all Caddy modules (including future third-party ones) and make them viewable on a web page; it also doubles as godoc comments. As such, this commit makes significant progress in migrating the docs from our temporary wiki page toward our new website which is still under construction. With this change, all host modules will use ctx.LoadModule() and pass in both the struct pointer and the field name as a string. This allows the reflect package to read the struct tag from that field so that it can get the necessary information like the module namespace and the inline key. This has the nice side-effect of unifying the code and documentation. It also simplifies module loading, and handles several variations on field types for raw module fields (i.e. variations on json.RawMessage, such as arrays and maps). I also renamed ModuleInfo.Name -> ModuleInfo.ID, to make it clear that the ID is the "full name" which includes both the module namespace and the name. This clarity is helpful when describing module hierarchy. As of this change, Caddy modules are no longer an experimental design. I think the architecture is good enough to go forward.
2019-10-30	auth: Clean up basicauth	Matthew Holt

2019-10-28	caddyhttp: Minor cleanup and fix nil pointer deref in caddyfile adapter	Matthew Holt

2019-10-10	http: authentication module; hash-password cmd; http_basic provider	Matthew Holt
	This implements HTTP basicauth into Caddy 2. The basic auth module will not work with passwords that are not securely hashed, so a subcommand hash-password was added to make it convenient to produce those hashes. Also included is Caddyfile support. Closes #2747.