Commit Graph
16 Commits
Author SHA1 Message Date
Jakub Kołodziejczak 7040bbe4c9 fix(backend): tighten http security headers (#860)
* fix(backend): set http security headers (vol.1)

* (vol.2) minimal *working* content security policy

* (vol.3) set csp only if https and if hosted on cloud

* improve generics

* get CLOUD_HOSTED from extension

* remove X-XSS-Protection

rationale as per: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection

* conditionally set all security related http headers
2022-11-06 17:07:25 +01:00
Ruben Fiszel 8fd0e23c80 UX improvements for run script 2022-11-06 16:08:10 +01:00
Ruben Fiszel cddec6469e fix(backend): tighten security around cookies to avoid csrf (#859)
* fix(backend): tighten security around cookies to avoid csrf

* everything httponly

* sqlx

* also handle 404

* shoter Windmill v message

* fix chart
2022-11-05 21:21:13 +01:00
Ruben Fiszel 464642dac7 improve superadmin settings 2022-11-05 12:30:11 +01:00
Ruben Fiszel 6439ffc2b5 remove initial invite to demo for ruben@windmill.dev 2022-11-05 10:45:17 +01:00
Ruben Fiszel 25c5e74d73 fix approving twice same flow 2022-11-04 00:32:55 +01:00
Ruben Fiszel 76e53a0139 feat(backend): add global delete user endpoint 2022-11-03 14:06:09 +01:00
Kai Jellinghaus 5bbfb40ee1 feat(backend): Deno lock files (#851)
* Enable generating locks for deno

* Handle deno lockfile

* Fix bug with empty lockfiles

* Handle deno lockfiles

* Allow unstable features when resolving deno deps

* Ignore bad lockfiles

* Handle Deno Path

* No Color output

* Fix OsStr
2022-11-02 23:52:45 +01:00
Ruben Fiszel 59da17bff8 UX improvements 2022-11-02 21:26:52 +01:00
Ruben Fiszel 513924b043 feat: implement allowed domains for self-hosted 2022-11-02 14:52:35 +01:00
Ruben Fiszel 9eb12e09b6 make get suspended flow job unauthed 2022-11-02 08:50:17 +01:00
Ruben Fiszel 918fb1f9a4 restore connect workspace to slack 2022-11-01 22:03:36 +01:00
Ruben Fiszel 39937e6a83 feat(backend): add parallel option for forloop and branchall (#840)
* parallel

* parallel

* fix 1

* fix 2

* fix 3

* fix 3

* fix 4

* sqlx

* add parallel toggle on frontend

* parallel in frontend

* serde

* fix everything

* fix everything
2022-11-01 06:09:00 +01:00
Ruben Fiszel ee91ca50cf clearer error message for unable to exchange refresh token 2022-10-30 21:35:22 +01:00
Ruben Fiszel 4bd74ad723 fix(backend): fix error handler progress update 2022-10-30 13:47:28 +01:00
Kai Jellinghaus 0034129a30 restructure the entire backend layout using workspaces (#815) 2022-10-29 11:58:06 +02:00