7 Commits

Include renames

Author	SHA1	Message	Date
lyra	5563999525	feat: public rate-limited access for v1.1 ... Add PublicAccessListener (priority 84) that allows rate-limited unauthenticated access to configured public paths. Authenticated users bypass this listener entirely via AcceptListener/AllowListener. New components: - PublicPathMatcher service with wildcard path matching (* and **) and optional host-prefix scoping - PublicAccessListener applying per-IP rate limiting to public paths - Separate public_limiter compound rate limiter (burst + sustained) - publicRateLimitCache pool (APCu in prod, array in tests) New env vars: - PUBLIC_PATHS (comma-separated path patterns, empty = disabled) - PUBLIC_BURST_COUNT/PUBLIC_BURST_TIME (default 100/60s) - PUBLIC_UPPER_COUNT/PUBLIC_UPPER_TIME (default 500/3600s) Tests: 52 new tests (29 unit for PublicPathMatcher, 12 unit for PublicAccessListener, 11 functional for PublicAccessFlowTest). Total: 293 tests, 605 assertions, all passing. PHP CS Fixer: 0 of 63 files need fixing. Documentation: README, CHANGELOG, ROADMAP, Caddyfile, example.env all updated with public access configuration and examples.	2026-08-12 09:26:50 -04:00
andrew	a0dc1a6049	rate-limiting update, now using a compound sliding-window. Continuing to move over to using traits more, and other code cleanup.	2026-03-11 08:27:27 -04:00
andrew	3d28485921	Removal of static-secret and totp-lookup. ... Intending to build support for single-use backup codes. Started refactoring to move trait dependencies internally, so that classes only have to specify their own direct dependencies.	2026-03-09 16:22:32 -04:00
andrew	1c4c289d81	massive rewrite to switch to using listeners instead of controller, header for login payload instead of get request, removed icon system, asset system, was able to remove all the domain processing, enhanced cookie security, and more.	2025-12-23 11:24:47 -05:00
andrew	b36aabb8a3	WIP: nearly done switching to using header instead of url parameters	2025-12-18 19:20:50 -05:00
andrew	a73d039e10	removed maker-bundle, switching to apcu	2025-12-16 22:34:57 -05:00
andrew	102b9f3e78	Full code refactor to Symfony7.4 with FrankenPHP ... Includes significant breaking changes. Default port and transportation changed to http via port 80 Names of environment variables have changed.	2025-12-15 12:30:14 -05:00