umputun / stash

81%

master: 84%

LAST BUILD ON BRANCH refs/tags/v0.3.0

branch: refs/tags/v0.3.0

CHANGE BRANCH

x

Reset

• refs/tags/v0.3.0
• api-list-keys
• conflict-detection
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/actions/download-artifact-6
• dependabot/github_actions/actions/setup-go-6
• dependabot/github_actions/actions/upload-artifact-5
• feat-public-access
• feat/git-ssh-key
• feat/key-history
• feat/rate-limiting
• feat/selective-session-invalidation
• feat/sighup-auth-reload
• feat/syntax-highlighting
• feat/value-validation
• feature/auth-hot-reload
• feature/cache-layer
• feature/enum-types
• feature/git-versioning
• feature/granular-auth
• feature/web-pagination
• fix/git-concurrency-and-error-handling
• fix/server-code-review-improvements
• json-schema-validation
• master
• persistent-sessions
• refactor/split-server-subpackages
• refs/tags/v0.1.0
• refs/tags/v0.1.1
• refs/tags/v0.10.0
• refs/tags/v0.10.1
• refs/tags/v0.10.2
• refs/tags/v0.10.3
• refs/tags/v0.10.4
• refs/tags/v0.11.0
• refs/tags/v0.12.0
• refs/tags/v0.12.1
• refs/tags/v0.13.0
• refs/tags/v0.13.1
• refs/tags/v0.13.2
• refs/tags/v0.13.3
• refs/tags/v0.2.0
• refs/tags/v0.2.1
• refs/tags/v0.2.2
• refs/tags/v0.3.1
• refs/tags/v0.4.0
• refs/tags/v0.5.0
• refs/tags/v0.6.0
• refs/tags/v0.7.0
• refs/tags/v0.7.1
• refs/tags/v0.7.2
• refs/tags/v0.7.3
• refs/tags/v0.8.0
• refs/tags/v0.8.1
• refs/tags/v0.8.2
• refs/tags/v0.9.0
• refs/tags/v0.9.1
• refs/tags/v0.9.2

Build # 19658924949

Build Type

push

github

Committed by web-flow

Commit Message

feat(auth): add granular authentication with prefix-based ACL (#8)

implement comprehensive auth system with YAML-based configuration:
- users with bcrypt passwords for web UI login
- api tokens with bearer auth for programmatic access
- prefix-based permissions (*, app/*, exact match) with longest-match-first
- separate read/write/readwrite access levels per prefix
- session management with httponly/samesite/secure cookies
- __Host- cookie prefix for enhanced https security

security hardening:
- login rate limiting (5 concurrent attempts max)
- constant-time username validation to prevent timing attacks
- acl enforcement on session-based api access (prevents privilege escalation)
- file permission guidance in documentation

includes example auth config file and comprehensive test coverage.

Run Details

292 of 302 new or added lines in 4 files covered. (96.69%)

3 existing lines in 1 file now uncovered.

1439 of 1773 relevant lines covered (81.16%)

18.35 hits per line