techaro.lol
Weighs the soul of incoming HTTP requests to stop AI crawlers
feat(apps): Make SASL login work on bookstack with Anubis (#502)
* Make SASL login work on bookstack with Anubis
* chore: spelling
Signed-off-by: Xe Iaso <me@xeiaso.net>
---------
Signed-off-by: Xe Iaso <me@xeiaso.net>
Co-authored-by: Xe Iaso <me@xeiaso.net>
+3
.github/actions/spelling/expect.txt
+3
.github/actions/spelling/expect.txt
+20
data/apps/bookstack-saml.yaml
+20
data/apps/bookstack-saml.yaml
···
1
+
# Make SASL login work on bookstack with Anubis
2
+
# https://www.bookstackapp.com/docs/admin/saml2-auth/
3
+
- name: allow-bookstack-sasl-login-routes
4
+
action: ALLOW
5
+
expression:
6
+
all:
7
+
- 'method == "POST"'
8
+
- path.startsWith("/saml2/acs")
9
+
- name: allow-bookstack-sasl-metadata-routes
10
+
action: ALLOW
11
+
expression:
12
+
all:
13
+
- 'method == "GET"'
14
+
- path.startsWith("/saml2/metadata")
15
+
- name: allow-bookstack-sasl-logout-routes
16
+
action: ALLOW
17
+
expression:
18
+
all:
19
+
- 'method == "GET"'
20
+
- path.startsWith("/saml2/sls")
+1
docs/docs/CHANGELOG.md
+1
docs/docs/CHANGELOG.md
···
18
18
- Updated the nonce value in the challenge JWT cookie to be a string instead of a number
19
19
- Rename cookies in response to user feedback
20
20
- Ensure cookie renaming is consistent across configuration options
21
+
- Add Bookstack app in data
21
22
- Add `--target-host` flag/envvar to allow changing the value of the Host header in requests forwarded to the target service.
22
23
- Bump AI-robots.txt to version 1.30 (add QualifiedBot)
23
24
- Add `RuntimeDirectory` to systemd unit settings so native packages can listen over unix sockets