fatchan/jschan - jschan - TurnKey Gitea

Author	SHA1	Message	Date
Thomas Lynch	1c5f14e419	This did not go as planned	4 years ago
Thomas Lynch	4c9e925387	express-session is dumb, and so am i. does this even make a difference?	4 years ago
Thomas Lynch	a8ede39f80	secureCookies only try to set secure:true when x-forwarded-proto is https closes #223	4 years ago
Thomas Lynch	09e0bcb518	references #209 , add optional google recaptcha. implementation could use some polish, but it will work for now.	4 years ago
Thomas Lynch	b0797f0418	Beta testing .onion support *DO NOT USE* This still has some issues and needs testing. - needs updated nginx configs added, expects "TOR" in the x-country-code header under a separate vhost - need to make sure bans work properly still - need to implement system to prevent captcha ddos, since i cant just to IP ratelimit now - im 99% sure post history of tor users is broken if viewed by non-global staff - manual input ban form will also be broken for non-global staff - could still use some improvement on the middleware having a little more complicated flor for tor users But for the most part it works. Basically it will use the bypass id of a tor user as their "ip".	4 years ago
some random guy	cfc97b8101	do not read session when not needed	4 years ago