aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge pull request #78 from gorilla/coreydaley-patch-1Corey Daley2023-07-151-5/+0
|\ | | | | Update README.md
| * Update README.mdCorey Daley2023-07-151-5/+0
|/ | | Signed-off-by: Corey Daley <cdaley@redhat.com>
* archive modeMatt Silverlock2022-12-091-0/+6
|
* build: use build matrix; drop Go <= 1.10 (#74)Matt Silverlock2020-09-121-57/+62
|
* docs: Include an example for using DecodeMulti in the Readme (#69)Tom2019-10-281-0/+58
| | | | | | * Include an example for using DecodeMulti in the Readme * Put warning in as code comment
* doc: correct a reference to block size that was meant to be key size (#64)Filippo Valsorda2019-07-071-1/+1
| | | The AES block size is always the same, it's the key size that selects AES-128, AES-192, or AES-256.
* Create config.yml (#63)Matt Silverlock2019-06-272-19/+65
| | | | | | * Create config.yml * Delete .travis.yml
* Merge pull request #59 from nilslice/sm/gitattrsKamil Kisiel2018-10-101-0/+1
|\ | | | | github: remove false-match for language detection
| * github: remove false-match for language detectionSteve Manuel2018-10-101-0/+1
|/
* Merge pull request #58 from gorilla/elithrar/generaterandomkey-docsKamil Kisiel2018-09-132-5/+11
|\ | | | | [docs] Clarify usage of GenerateRandomKey
| * [docs] Add note RE: persistence to GenerateRandomKeyMatt Silverlock2018-09-131-0/+4
| |
| * [docs] Clarify usage of GenerateRandomKeyMatt Silverlock2018-09-131-5/+7
| |
* | Create release_drafter.yml (#57)Matt Silverlock2018-08-301-0/+4
|/
* Create go.mod to be aware of go modules (#55)Wilk2018-08-271-0/+1
|
* Update LICENSE & AUTHORS files (#54)Matt Silverlock2018-06-082-1/+20
|
* [bugfix] check for an empty hashKey (#52)Wesley Bitter2018-05-182-9/+16
| | | | this scenario might occur when converting from an empty string to byte slice, such as when reading from a configuration file.
* README.md: Add sourcegraph badgeKamil Kisiel2017-02-241-0/+2
|
* [bugfix] Fix NopDecoderCraig Peterson2016-10-032-4/+31
| | | | * Fixes #41
* Add fuzz testing corpus.Kamil Kisiel2016-08-17136-0/+249
|
* travis.yml: add go1.7Kamil Kisiel2016-08-161-0/+1
|
* Merge pull request #39 from 0x434D53/masterKamil Kisiel2016-05-251-0/+2
|\ | | | | Update Readme: Added HttpOnly, Secure flags for setting the cookie
| * Update Readme: Added HttpOnly, Secure flags for setting the cookie0x434D532016-05-251-0/+2
|/
* Merge branch 'master' of github.com:gorilla/securecookieMatt Silverlock2016-04-222-1/+26
|\
| * [feature] NopEncoder: accept/return []byte.Matt Silverlock2016-04-222-1/+26
| |\ | | | | | | [feature] NopEncoder: accept/return []byte.
| | * [feature] NopEncoder: accept/return []byte.Matt Silverlock2016-03-312-1/+26
| |/ | | | | | | - [docs] Update doc.go for golint.
* / [ci] .travis.yml go vet fix.Matt Silverlock2016-04-221-4/+3
|/
* Merge pull request #37 from gorilla/ci/travis-go-1.6Matt Silverlock2016-02-271-5/+16
|\ | | | | [ci] Update .travis.yml to build Go 1.6
| * Update .travis.yml to build Go 1.6Matt Silverlock2016-02-271-5/+16
|/
* Merge pull request #33 from elithrar/subtle-len-backportMatt Silverlock2015-08-201-1/+3
|\ | | | | Reverts d8773d3 - backports len check for subtle.ConstantTimeCompare.
| * Reverts d8773d3 - backports len check for subtle.ConstantTimeCompare.Matt Silverlock2015-08-201-1/+3
|/
* Update .travis.ymlKamil Kisiel2015-08-201-3/+4
|
* Added fuzz testing facilities.Kamil Kisiel2015-08-182-0/+72
|
* Merge pull request #30 from elithrar/gen-key-docKamil Kisiel2015-08-081-0/+7
|\ | | | | Improved documentation for GenerateRandomKey
| * Added note re: using GenerateRandomKey() not persisting keys.Matt Silverlock2015-08-081-0/+4
| |
| * Improved warning around GenerateRandomKey.Matt Silverlock2015-08-081-0/+3
|/
* add test for nil hash keyKamil Kisiel2015-08-061-0/+12
|
* Merge pull request #29 from elithrar/codec-maxage-fixKamil Kisiel2015-08-061-1/+23
|\ | | | | Improved documentation for CodecsFromPairs.
| * Improved documentation for CodecsFromPairs.Matt Silverlock2015-08-061-1/+23
|/ | | | | | | - Partially addresses https://github.com/gorilla/sessions/issues/48 - Downstream store packages will need to perform the type assertion in their code - Elected to document this and fix stores rather than add a function to the public API.
* Merge pull request #27 from s7v7nislands/fix_readmeMatt Silverlock2015-08-061-1/+1
|\ | | | | Update block key lengths in README
| * fix readmes7v7nislands2015-07-171-1/+1
| |
* | Merge pull request #28 from keunwoo/keunwoo-errors-alt-20150720Kamil Kisiel2015-07-282-31/+184
|\ \ | |/ |/| Make errors more distinguishable
| * Move error type assertions to test file.Keunwoo Lee2015-07-272-6/+4
| | | | | | | | | | Per elithrar comment on PR 28: https://github.com/gorilla/securecookie/pull/28#discussion_r35059831
| * Rename errorImpl -> cookieErrorKeunwoo Lee2015-07-271-27/+27
| | | | | | | | | | Per elithrar comment on PR 28: https://github.com/gorilla/securecookie/pull/28#discussion_r35059597
| * Make errors more distinguishableKeunwoo Lee2015-07-212-31/+186
|/ | | | | | | | | | | | | | | | | | | | | | | | | | Prior to this commit, this library raised errors either mostly using errors.New() or directly passing through error values from underlying libraries. This made it difficult for clients to respond correctly to the errors that were returned. This becomes particularly problematic when securecookie is used together with gorilla/sessions. From an operations standpoint, you often want to log different errors when the client simply provides an invalid auth cookie, versus an I/O error fetching data from the session store. The former probably indicates an expired timestamp or similar client error; the latter indicates a possible failure in a backend database. This commit introduces a public Error interface, which is now returned consistently on all errors, and can be used to distinguish between implementation errors (IsUsage() and IsInternal()) and failed validation of user input (IsDecode()). See also discussion on pull requests #9 and #24: https://github.com/gorilla/securecookie/pull/9 https://github.com/gorilla/securecookie/pull/24 Some interface comments on other API functions have been clarified and updated to harmonize with the new error interfaces.
* Merge pull request #26 from Annonomus-Penguin/patch-1Kamil Kisiel2015-07-171-1/+1
|\ | | | | Fixed broken link in README
| * Fixed broken link in READMEAnnonomus-Penguin2015-07-171-1/+1
|/
* Merge pull request #23 from elithrar/readme-updatesKamil Kisiel2015-07-051-1/+74
|\ | | | | Fleshed out the README based on doc.go.
| * Fleshed out the README based on doc.go.Matt Silverlock2015-07-051-1/+74
|/ | | | | | - Added mention of the LICENSE. - Used GFM code blocks for the examples. - Added mention of the JSON encoder.
* Merge pull request #22 from cyx/use-reflect-deepequalKamil Kisiel2015-06-061-14/+2
|\ | | | | Use reflect.DeepEqual instead
| * Use reflect.DeepEqual insteadCyril David2015-05-251-14/+2
| | | | | | | | | | Unless there's something I'm missing, probably better to delegate this check to the reflect package.