umputun / stash / 19658592301

81%

master: 83%

Build Type

Pull #8

github

Committed by umputun

Commit Message

feat(auth): add granular authentication with prefix-based ACL

implement comprehensive auth system with YAML-based configuration:
- users with bcrypt passwords for web UI login
- api tokens with bearer auth for programmatic access
- prefix-based permissions (*, app/*, exact match) with longest-match-first
- separate read/write/readwrite access levels per prefix
- session management with httponly/samesite/secure cookies
- __Host- cookie prefix for enhanced https security

security hardening:
- login rate limiting (5 concurrent attempts max)
- constant-time username validation to prevent timing attacks
- acl enforcement on session-based api access (prevents privilege escalation)
- file permission guidance in documentation

includes example auth config file and comprehensive test coverage.

Pull Request Pull Request #8: feat(auth): add granular authentication with prefix-based ACL

Run Details

292 of 302 new or added lines in 4 files covered. (96.69%)

3 existing lines in 1 file now uncovered.

1439 of 1773 relevant lines covered (81.16%)

18.35 hits per line