starred/warmbly
1
0
Fork 0
mirror of https://github.com/warmbly/warmbly.git synced 2026-09-11 08:06:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
613 Commits 8 Branches 12 Tags
6ca3d2e92494de553965edb78d9a4893fd32fd6d
Commit Graph
613 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Matthew Meszaros 7e123a2dac fix: remove deep health endpoint and add IP rate limiting to public endpoints 2026-04-09 16:03:37 +00:00
Matthew Meszaros 80358168ae test: add unit tests for warmup health evaluation, campaign state machine, and templates 2026-04-09 15:59:27 +00:00
Matthew Meszaros 23b5c925e4 feat: add scheduled warmup health sweep, pool health summary endpoint, and admin overview 2026-04-09 15:57:04 +00:00
Matthew Meszaros 65641ec1f2 feat: add send test email endpoint for campaign preview before launch 2026-04-09 15:52:59 +00:00
Matthew Meszaros 33092fa56e fix: add 10MB request body size limit to prevent OOM from large payloads 2026-04-09 15:50:08 +00:00
Matthew Meszaros 816c432e71 feat: add deep health check endpoint with PostgreSQL connectivity check 2026-04-09 15:49:28 +00:00
Matthew Meszaros dd1fc3d41d feat: generate List-Unsubscribe URL for campaign emails when unsubscribe header is enabled 2026-04-09 15:17:39 +00:00
Matthew Meszaros ffe6bd31ca fix: sanitize Stripe error messages to prevent leaking internal details to clients 2026-04-09 15:15:18 +00:00
Matthew Meszaros 3699774f7d fix: use timeout context for Stripe webhook migration goroutines to prevent leaks 2026-04-09 15:13:47 +00:00
Matthew Meszaros 9c4b6d21fd fix: add contact email deduplication with unique index and upsert on conflict 2026-04-09 15:12:41 +00:00
Matthew Meszaros 41aa183be2 fix: add campaign state machine to prevent invalid status transitions 2026-04-09 15:11:58 +00:00
Matthew Meszaros 36f4a94814 fix: prevent race condition in dedicated worker assignment with atomic insert 2026-04-09 14:54:22 +00:00
Matthew Meszaros 306690db0a feat: add explicit position column to sequences for deterministic ordering 2026-04-09 14:52:17 +00:00
Matthew Meszaros 421a3fb3dc fix: add campaign ownership validation to prevent IDOR in bulk campaign operations 2026-04-09 14:48:29 +00:00
Matthew Meszaros c2948d464b fix: add hard limit to pipeline list query to prevent unbounded results 2026-04-09 14:47:14 +00:00
Matthew Meszaros d903c26255 fix: add hard limit of 500 to template list query to prevent unbounded results 2026-04-09 14:46:20 +00:00
Matthew Meszaros 4f16944ff8 fix: add size limits to bulk contact operations to prevent resource exhaustion 2026-04-09 14:45:10 +00:00
Matthew Meszaros d417b1f0a4 perf: add missing index on campaign_leads(contact_id) for reverse lookups 2026-04-09 14:43:40 +00:00
Matthew Meszaros 4b8ff94201 fix: use correct column names contact_id and campaign_id in campaign_leads queries 2026-04-09 14:43:10 +00:00
Matthew Meszaros 0799020dac feat: add metrics, warmup content variety, tz-aware scheduling, org budget, admin stubs, and bug fixes 2026-04-09 14:33:45 +00:00
Matthew Meszaros 19d20e72b4 feat: add warmup health throttled state, complaint/bounce metrics, A/B analysis, and rate limiting 2026-04-09 12:51:30 +00:00
Matthew Meszaros ba9e3c096a fix: replace context.TODO with proper context in cipher and Google client 
- cipher: use the already-available ctx parameter for DynamoDB Put
- goog: use context.Background for OAuth token refresh callback since
  it runs asynchronously outside any request lifecycle
 2026-04-09 12:10:42 +00:00
Matthew Meszaros 91ec703093 fix: increment verification code tries on failed attempts 
The Tries counter on login and registration sessions was checked but
never incremented, making the brute-force protection dead code. An
attacker could retry verification codes indefinitely within the session
TTL. Now each failed attempt increments and persists the counter.
 2026-04-09 12:10:26 +00:00
Matthew Meszaros 4ec7e65896 fix: prevent nil deref on Stripe Customer and use background ctx for goroutines 
- Guard checkoutSession.Customer access with nil checks to prevent panic
  when Stripe sends incomplete checkout session data
- Switch worker migration goroutines from request ctx to context.Background()
  since these operations outlive the webhook HTTP request and would be
  cancelled prematurely when the response completes
 2026-04-09 12:09:07 +00:00
Matthew Meszaros 7fe8e663d5 fix: propagate parent context instead of context.TODO in cipher service 
The ctx parameter was already available from the Cipher method but
wasn't being passed to the DynamoDB Put call for new DEK storage.
 2026-04-09 12:06:54 +00:00
Matthew Meszaros 6517b06893 feat: expand warmup subject lines and conversation templates 
Increase warmup subjects from 5 to 20 and conversations from 3 to 12
to reduce repetition patterns that spam filters can detect. New themes
cover industry, tools, networking, feedback, planning, reading, travel,
wellness, and events.
 2026-04-09 12:06:30 +00:00
Matthew Meszaros 3edf6b1d22 refactor: remove redundant min/max helpers shadowing Go builtins 
Go 1.21+ provides builtin min/max for all ordered types. Remove the
custom int helpers and replace math.Max with builtin max for floats.
 2026-04-09 12:06:25 +00:00
Matthew Meszaros 57644d752d refactor: replace fmt.Printf with structured zerolog logging and fix weak URL hash 
- Replace all fmt.Printf calls in Kafka consumer/producer, tracking consumer,
  and user email task with structured zerolog (log.Warn/Error/Info)
- Fix hashURL using SHA-256 instead of naive first-8-chars+length approach
  which was collision-prone for deduplication
 2026-04-09 12:06:20 +00:00
Matthew Meszaros 9dbd25b24b feat: delete S3 email body after successful send 2026-04-03 06:25:44 +00:00
Matthew Meszaros 308f72b874 feat: add CORS origin config, encrypt email bodies in S3, replace printfs with structured logging 2026-04-03 06:24:20 +00:00
Matthew Meszaros d8d88c7f69 feat: add warmup health tracking, migrate repos to postgres, and overhaul web UI 2026-04-03 06:08:52 +00:00
Matthew Meszaros 21ffb6a748 feat: add advanced outreach controls with A/B testing, deliverability dashboard, and DLQ 2026-02-20 08:59:17 +00:00
Matthew Meszaros c564b3ac95 feat: implement unibox replies, warmup conversations, and daily email limits 2026-02-20 04:54:46 +00:00
Matthew Meszaros ae0a8f16a2 feat: add web dev container and use unique host ports 2026-02-19 03:07:06 +00:00
Matthew MeszarosandClaude Opus 4.6 fbb55379c5 fix: propagate captcha errors and fix JWT signing 
- Return actual captcha verification errors instead of generic
  internal errors in login, registration, and reset password flows
- Fix Sentry capturing wrong variable (err -> xerr) in
  RegistrationConfirm
- Pass AuthSecret as []byte to JWT SignedString/keyfunc
- Send form data in request body instead of PostForm for Turnstile
- Improve Turnstile non-200 error handling with response body logging

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-18 06:30:50 +01:00
Matthew Meszaros c12fd93def Add local Sentry logging 2026-02-14 05:49:49 +01:00
Matthew Meszaros 6c6d26d8f0 Update auth and onboarding flow 2026-02-14 05:38:27 +01:00
Matthew Meszaros 2635e9c6da frontend & email design; local email setup 2026-02-12 17:25:46 +01:00
Matthew Meszaros 28b5f33056 Turnstile modification 2026-02-11 17:54:49 +01:00
Matthew Meszaros 5c979f2cd9 Theme modification 2026-02-11 17:27:19 +01:00
Matthew Meszaros 141bc54974 Add sample auth UI theme 2026-02-10 19:30:47 +01:00
Máté Mészáros (Laptop) c33f3fe8fe Docs using Fumadocs 2026-01-30 18:07:06 +01:00
Máté Mészáros (Laptop) ed35ab2dbc Realtime Updates 2026-01-30 15:32:58 +01:00
Máté Mészáros (Laptop) c06e84e3f2 Dashboard with shadcn, tailwind, zustand & react-query 2026-01-30 08:47:26 +01:00
Máté Mészáros (Laptop) 06545bb799 Fix: Docker build issues 2026-01-30 04:52:40 +01:00
Matthew Meszaros de28f9c7ee Merge pull request #3 from warmbly/dev 
Backend, Consumer, Worker, Tracking, Realtime & CI/CD Automation
 2026-01-30 04:39:30 +01:00
Máté Mészáros (Laptop) 8e3c399232 Auto deploy on new release 2026-01-30 04:29:07 +01:00
Máté Mészáros (Laptop) a8d13a6d53 Fix: Go Tests 2026-01-29 09:23:46 +01:00
Matthew Meszaros 9c7d4798e9 Merge pull request #2 from warmbly/tasks/org 
Organization-Based Access, Infrastructure & Documentation
 2026-01-29 09:11:31 +01:00
Máté Mészáros (Laptop) e137dae912 Docs & Explanations 2026-01-29 09:01:32 +01:00