1
83%
master: 83%

Ran 25 Nov 2025 04:53AM UTC

Files 8

Run time 0s

Badge

Embed ▾

Committed 25 Nov 2025 04:51AM UTC coverage: 81.162% (+2.0%) from 79.132%

Job # 19658657767.1

Build Type

push

github

Committed by

web-flow

Commit Message

feat(auth): add granular authentication with prefix-based ACL (#8)

implement comprehensive auth system with YAML-based configuration:
- users with bcrypt passwords for web UI login
- api tokens with bearer auth for programmatic access
- prefix-based permissions (*, app/*, exact match) with longest-match-first
- separate read/write/readwrite access levels per prefix
- session management with httponly/samesite/secure cookies
- __Host- cookie prefix for enhanced https security

security hardening:
- login rate limiting (5 concurrent attempts max)
- constant-time username validation to prevent timing attacks
- acl enforcement on session-based api access (prevents privilege escalation)
- file permission guidance in documentation

includes example auth config file and comprehensive test coverage.

Run Details

1439 of 1773 relevant lines covered (81.16%)

18.35 hits per line

umputun / stash / 19658657767 / 1
83%
master: 83%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 19658657767.1

umputun / stash / 19658657767 / 1 83% master: 83%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 19658657767.1

umputun / stash / 19658657767 / 1
83%
master: 83%

README BADGES
x