Latte 0f5f5cdd95 fix: do not echo setting values in configuration errors; test: stdio and config redaction

2026-10-14 17:52:07 +02:00

..

catalog

fix: annotate POST render endpoints read-only and irreversible POSTs destructive

2026-10-14 16:09:59 +02:00

gitea

fix: reject a trailing newline in sudo; test: malformed input suite

2026-10-14 17:49:37 +02:00

oauth

fix: refuse a token store directory owned by another user or left writable (SEC-13)

2026-10-14 17:36:21 +02:00

__init__.py

feat: new settings, CLI skeleton and interface skeletons

2026-10-14 15:40:37 +02:00

audit.py

fix: create the audit log 0600 in a 0700 directory and refuse symlinks (SEC-11)

2026-10-14 17:18:29 +02:00

auth.py

feat: add per-user OAuth mode proxying sign-in to Gitea

2026-10-14 16:41:18 +02:00

cli.py

fix: reject whitespace and control characters in base URLs and warn on plain http Gitea (SEC-10)

2026-10-14 17:34:15 +02:00

config.py

fix: do not echo setting values in configuration errors; test: stdio and config redaction

2026-10-14 17:52:07 +02:00

errors.py

feat: new settings, CLI skeleton and interface skeletons

2026-10-14 15:40:37 +02:00

identity.py

fix: redact identity secrets through a public hook and mask issued agm_ tokens

2026-10-14 16:45:36 +02:00

logging_utils.py

feat: add structured logging helpers and instrument get_issue (#14)

2026-06-22 15:40:36 +02:00

rate_limit.py

fix: rate limit /token and /revoke, bucket IPv6 by /64 and warn about untrusted forwarded headers (SEC-08)

2026-10-14 17:29:12 +02:00

request_context.py

fix: quota pending sign-ins and registrations per address, keep young clients, write the store off the loop (SEC-09)

2026-10-14 17:32:03 +02:00

response_limits.py

feat: harden gateway with policy engine, secure tools, and governance docs

2026-02-14 16:06:43 +01:00

security.py

test: security suite for auth, startup, redaction; fix: mask secrets in object keys

2026-10-14 17:44:20 +02:00

server.py

fix: record the calling client and only schema-known names in audit entries (SEC-12, SEC-18)

2026-10-14 17:14:13 +02:00

setup_cmd.py

fix: load ./.env only when private and owned, add --env-file and AEGIS_ENV_FILE (SEC-04)

2026-10-14 17:22:29 +02:00

setup_snippets.py

feat: add the aegis-gitea-mcp setup command

2026-10-14 15:50:02 +02:00

setup_template.py

fix: add OAUTH_REDIRECT_ALLOWLIST for client registration and waive the open default (SEC-05)

2026-10-14 17:24:41 +02:00

transports.py

fix: quota pending sign-ins and registrations per address, keep young clients, write the store off the loop (SEC-09)

2026-10-14 17:32:03 +02:00