aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'main' of github.com:/gorilla/securecookieHank Shen2023-10-09150-377/+293
|\
| * Update go version & add verification/testing tools (#81)Corey Daley2023-07-31153-437/+205
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | <!-- For Work In Progress Pull Requests, please use the Draft PR feature, see https://github.blog/2019-02-14-introducing-draft-pull-requests/ for further details. For a timely review/response, please avoid force-pushing additional commits if your PR already received reviews or comments. Before submitting a Pull Request, please ensure that you have: - 📖 Read the Contributing guide: https://github.com/gorilla/.github/blob/main/CONTRIBUTING.md - 📖 Read the Code of Conduct: https://github.com/gorilla/.github/blob/main/CODE_OF_CONDUCT.md - Provide tests for your changes. - Use descriptive commit messages. - Comment your code where appropriate. - Squash your commits - Update any related documentation. - Add gorilla/pull-request-reviewers as a Reviewer --> ## What type of PR is this? (check all applicable) - [ ] Refactor - [ ] Feature - [ ] Bug Fix - [x] Optimization - [ ] Documentation Update ## Description ## Related Tickets & Documents <!-- For pull requests that relate or close an issue, please include them below. We like to follow [Github's guidance on linking issues to pull requests](https://docs.github.com/en/issues/tracking-your-work-with-issues/linking-a-pull-request-to-an-issue). For example having the text: "closes #1234" would connect the current pull request to issue 1234. And when we merge the pull request, Github will automatically close the issue. --> - Related Issue # - Closes # ## Added/updated tests? - [ ] Yes - [ ] No, and this is why: _please replace this line with details on why tests have not been included_ - [ ] I need help with writing tests ## Run verifications and test - [ ] `make verify` is passing - [ ] `make test` is passing
| * docs: changed deprecated goo.gl links to their unshortened variant (#77)vvvvv2023-07-291-2/+2
| | | | | | | | | | | | | | | | Unshortened the links in the docs because 1. goo.gl is a deprecated service 2. being able to see the actual link is more verbose thus more useful inside of docs Co-authored-by: Corey Daley <cdaley@redhat.com>
| * Merge pull request #78 from gorilla/coreydaley-patch-1Corey Daley2023-07-151-5/+0
| |\ | | | | | | Update README.md
| | * Update README.mdCorey Daley2023-07-151-5/+0
| |/ | | | | Signed-off-by: Corey Daley <cdaley@redhat.com>
| * archive modeMatt Silverlock2022-12-091-0/+6
| |
| * build: use build matrix; drop Go <= 1.10 (#74)Matt Silverlock2020-09-121-57/+62
| |
| * docs: Include an example for using DecodeMulti in the Readme (#69)Tom2019-10-281-0/+58
| | | | | | | | | | | | * Include an example for using DecodeMulti in the Readme * Put warning in as code comment
| * doc: correct a reference to block size that was meant to be key size (#64)Filippo Valsorda2019-07-071-1/+1
| | | | | | The AES block size is always the same, it's the key size that selects AES-128, AES-192, or AES-256.
| * Create config.yml (#63)Matt Silverlock2019-06-272-19/+65
| | | | | | | | | | | | * Create config.yml * Delete .travis.yml
| * Merge pull request #59 from nilslice/sm/gitattrsKamil Kisiel2018-10-101-0/+1
| |\ | | | | | | github: remove false-match for language detection
| | * github: remove false-match for language detectionSteve Manuel2018-10-101-0/+1
| |/
| * Merge pull request #58 from gorilla/elithrar/generaterandomkey-docsKamil Kisiel2018-09-132-5/+11
| |\ | | | | | | [docs] Clarify usage of GenerateRandomKey
| | * [docs] Add note RE: persistence to GenerateRandomKeyMatt Silverlock2018-09-131-0/+4
| | |
| | * [docs] Clarify usage of GenerateRandomKeyMatt Silverlock2018-09-131-5/+7
| | |
| * | Create release_drafter.yml (#57)Matt Silverlock2018-08-301-0/+4
| |/
| * Create go.mod to be aware of go modules (#55)Wilk2018-08-271-0/+1
| |
| * Update LICENSE & AUTHORS files (#54)Matt Silverlock2018-06-082-1/+20
| |
| * [bugfix] check for an empty hashKey (#52)Wesley Bitter2018-05-182-9/+16
| | | | | | | | this scenario might occur when converting from an empty string to byte slice, such as when reading from a configuration file.
* | updatev1.1.2Wenhui Shen2017-07-222-0/+1
| |
* | updateWenhui Shen2017-07-222-0/+16
| |
* | Decode: 支持传入临时参数 maxAgeWenhui Shen2017-07-221-3/+7
|/
* README.md: Add sourcegraph badgeKamil Kisiel2017-02-241-0/+2
|
* [bugfix] Fix NopDecoderCraig Peterson2016-10-032-4/+31
| | | | * Fixes #41
* Add fuzz testing corpus.Kamil Kisiel2016-08-17136-0/+249
|
* travis.yml: add go1.7Kamil Kisiel2016-08-161-0/+1
|
* Merge pull request #39 from 0x434D53/masterKamil Kisiel2016-05-251-0/+2
|\ | | | | Update Readme: Added HttpOnly, Secure flags for setting the cookie
| * Update Readme: Added HttpOnly, Secure flags for setting the cookie0x434D532016-05-251-0/+2
|/
* Merge branch 'master' of github.com:gorilla/securecookieMatt Silverlock2016-04-222-1/+26
|\
| * [feature] NopEncoder: accept/return []byte.Matt Silverlock2016-04-222-1/+26
| |\ | | | | | | [feature] NopEncoder: accept/return []byte.
| | * [feature] NopEncoder: accept/return []byte.Matt Silverlock2016-03-312-1/+26
| |/ | | | | | | - [docs] Update doc.go for golint.
* / [ci] .travis.yml go vet fix.Matt Silverlock2016-04-221-4/+3
|/
* Merge pull request #37 from gorilla/ci/travis-go-1.6Matt Silverlock2016-02-271-5/+16
|\ | | | | [ci] Update .travis.yml to build Go 1.6
| * Update .travis.yml to build Go 1.6Matt Silverlock2016-02-271-5/+16
|/
* Merge pull request #33 from elithrar/subtle-len-backportMatt Silverlock2015-08-201-1/+3
|\ | | | | Reverts d8773d3 - backports len check for subtle.ConstantTimeCompare.
| * Reverts d8773d3 - backports len check for subtle.ConstantTimeCompare.Matt Silverlock2015-08-201-1/+3
|/
* Update .travis.ymlKamil Kisiel2015-08-201-3/+4
|
* Added fuzz testing facilities.Kamil Kisiel2015-08-182-0/+72
|
* Merge pull request #30 from elithrar/gen-key-docKamil Kisiel2015-08-081-0/+7
|\ | | | | Improved documentation for GenerateRandomKey
| * Added note re: using GenerateRandomKey() not persisting keys.Matt Silverlock2015-08-081-0/+4
| |
| * Improved warning around GenerateRandomKey.Matt Silverlock2015-08-081-0/+3
|/
* add test for nil hash keyKamil Kisiel2015-08-061-0/+12
|
* Merge pull request #29 from elithrar/codec-maxage-fixKamil Kisiel2015-08-061-1/+23
|\ | | | | Improved documentation for CodecsFromPairs.
| * Improved documentation for CodecsFromPairs.Matt Silverlock2015-08-061-1/+23
|/ | | | | | | - Partially addresses https://github.com/gorilla/sessions/issues/48 - Downstream store packages will need to perform the type assertion in their code - Elected to document this and fix stores rather than add a function to the public API.
* Merge pull request #27 from s7v7nislands/fix_readmeMatt Silverlock2015-08-061-1/+1
|\ | | | | Update block key lengths in README
| * fix readmes7v7nislands2015-07-171-1/+1
| |
* | Merge pull request #28 from keunwoo/keunwoo-errors-alt-20150720Kamil Kisiel2015-07-282-31/+184
|\ \ | |/ |/| Make errors more distinguishable
| * Move error type assertions to test file.Keunwoo Lee2015-07-272-6/+4
| | | | | | | | | | Per elithrar comment on PR 28: https://github.com/gorilla/securecookie/pull/28#discussion_r35059831
| * Rename errorImpl -> cookieErrorKeunwoo Lee2015-07-271-27/+27
| | | | | | | | | | Per elithrar comment on PR 28: https://github.com/gorilla/securecookie/pull/28#discussion_r35059597
| * Make errors more distinguishableKeunwoo Lee2015-07-212-31/+186
|/ | | | | | | | | | | | | | | | | | | | | | | | | | Prior to this commit, this library raised errors either mostly using errors.New() or directly passing through error values from underlying libraries. This made it difficult for clients to respond correctly to the errors that were returned. This becomes particularly problematic when securecookie is used together with gorilla/sessions. From an operations standpoint, you often want to log different errors when the client simply provides an invalid auth cookie, versus an I/O error fetching data from the session store. The former probably indicates an expired timestamp or similar client error; the latter indicates a possible failure in a backend database. This commit introduces a public Error interface, which is now returned consistently on all errors, and can be used to distinguish between implementation errors (IsUsage() and IsInternal()) and failed validation of user input (IsDecode()). See also discussion on pull requests #9 and #24: https://github.com/gorilla/securecookie/pull/9 https://github.com/gorilla/securecookie/pull/24 Some interface comments on other API functions have been clarified and updated to harmonize with the new error interfaces.
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-23 05:55:36 +0300