Commit Graph

11 Commits

Author SHA1 Message Date
zefie
e5c5428d06 attempt to fix double reg bug? 2022-11-28 12:19:09 -05:00
zefie
745de7de1f fix issue where users could bypass username sanity checks with direct urls 2022-10-22 18:41:50 -04:00
zefie
37f1ab67ad BREAKING CHANGES: (for SeCuRiTy):
By default:
- `ssid_sessions[socket.ssid]` is now `session_data`
- `require` is no longer allowed in user scripts

To access global `socket_sessions` and `ssid_sessions`, as well as `require` additional modules, you must set `privileged: true` for the specific service. See `config.json`.
2022-10-09 13:26:14 -04:00
zefie
2be8c66b01 Bug fixes
- wtv-tricks:/unregister properly deletes SSID folder
- Registration properly saves account data if SSID folder doesn't exist
- do not send wtv-mail-count if SSID is not yet registered
- Registration now correctly creates the welcome message for user0
- update wtv-tricks:/unregister to only allow the primary user to unregister the account
2022-03-12 15:14:32 -05:00
zefie
6efbf465f0 more user creation tweaks 2022-03-09 17:38:14 -05:00
zefie
bf7369431e add wtv-ticket store api
- fix broken session bust crap from before
- properly resume session as user when server restarted
- api available to store other things in the wtv-ticket
2022-03-09 17:38:07 -05:00
zefie
fdd2f16f3b breaking change: doErrorPage moved to wtvshared.doErrorPage
- but I fixed flashrom error handling..
- added a passthrough for old scripts
2021-08-16 08:12:27 -04:00
zefie
1967c076a9 add protection against requesting direct service files 2021-08-15 18:51:48 -04:00
zefie
ce7f6259b8 fix: new user registration did not save 2021-08-10 10:00:00 -04:00
zefie
e5d5b1e8e7 unescape query arguments during processing 2021-08-08 14:18:50 -04:00
zefie
f15f377f8e v0.9.12 - WILL REBASE - BE WARNED
- convert post_data to query if valid query data
- wtv-register system
- Store Session data as JSON flat file
- wtv-cookie support
- spent way too much time on a page no one will read
- move filterSSID to WTVClientSessionData
- disable compression until fixed
- do not delete WTVSec on last socket, instead recreate on prereg
- set 'wtv-bypass-proxy' to false
- rework header whitelist system for HTTP(s) proxy
- clean up SSID session data only if client is not seen for 3 minutes
- add shouldWeCompress() function
- add additional headers to wtv-setup:/get
- add initial blank wtv-music:/get-playlist
2021-08-07 17:00:26 -04:00