Ruben Fiszel
278ab4bf57
remove rust embed in dev mode
2024-12-15 13:36:21 +01:00
Lucas Abel
f767d92ec7
add flake.nix and package windmill backend ( #4660 )
2024-11-07 12:23:19 +01:00
Ruben Fiszel
2953154a25
fix: cache js static assets by default
2024-10-18 00:12:07 +02:00
Ruben Fiszel
d533a017a7
fix: improve first time setup experience
2024-09-15 21:02:36 +02:00
Ruben Fiszel
98d3358e1e
fix: cache wasm
2024-06-22 00:58:49 +02:00
HugoCasa
93f58056a0
feat: replace ephemeral tokens by jwt ( #3908 )
...
* feat: replace ephemeral tokens by jwt
* fix: migration + sqlx
* fix: tests, agent, ee ref
* fix: sqlx
* fix: tests
* fix: jwt prefix change + fix tests
* fix: nit
* fix: handle agent mode
2024-06-14 13:07:35 +02:00
Ruben Fiszel
16b3b659e9
chore: update deps
2024-03-21 13:37:17 +01:00
Ruben Fiszel
fde056a62f
fix: add access-control-allow-origin to static assets
2023-12-05 12:15:21 +01:00
Ruben Fiszel
69d4a23b4f
send a webhook on new user + lazy static refactor ( #1203 )
...
* supercharge
* supercharge
* progress
* progress
* display config
* display config
* display config
* display config
* fix extensions
* fix build
* disable nsjail = false for test
2023-02-15 10:59:50 +01:00
Ruben Fiszel
c7f6b1870e
update axum
2023-01-11 08:19:20 +01:00
Ruben Fiszel
3872b1097b
menu redesign
2022-11-15 11:57:05 +01:00
Jakub Kołodziejczak
7e6aac3ea8
refactor(backend): improve memory footprint related to csp ( #866 )
2022-11-07 01:29:37 +01:00
Jakub Kołodziejczak
5bee890032
chore(backend): set csp based on env var ( #864 )
...
* chore(backend): set csp based on env var
* use extension instead of reading directly from env var
2022-11-06 22:35:37 +01:00
Jakub Kołodziejczak
d8d82fa12d
chore(csp): fix trailing semicolon ( #863 )
2022-11-06 19:50:45 +01:00
Jakub Kołodziejczak
2562f98cbc
fix(backend): improve csp ( #861 )
...
rationale for setting `'unsafe-inline'` is that it cannot be more void
than the lack of `script-src` but it still might add some benefits
2022-11-06 18:00:16 +01:00
Jakub Kołodziejczak
df1c619e25
fix(backend): tighten http security headers ( #860 )
...
* fix(backend): set http security headers (vol.1)
* (vol.2) minimal *working* content security policy
* (vol.3) set csp only if https and if hosted on cloud
* improve generics
* get CLOUD_HOSTED from extension
* remove X-XSS-Protection
rationale as per: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
* conditionally set all security related http headers
2022-11-06 17:07:25 +01:00
Kai Jellinghaus
6263e90735
restructure the entire backend layout using workspaces ( #815 )
2022-10-29 11:58:06 +02:00
Ruben Fiszel
Lucas Abel
HugoCasa
Jakub Kołodziejczak
Kai Jellinghaus