920920bc67
Security - SSRF: async DNS resolver; allow_redirects=False on all outbound clients; matrix homeserver_url validated on create/update/test; update_provider and email_bot merge incoming config and reject ***-masked secrets. - Auth: bcrypt offloaded to asyncio.to_thread; JWT now carries iss/aud + leeway and rejects missing claims; setup TOCTOU closed inside a transaction; rate limits extended (default 600/min, 10/min on password change, 30/min on needs-setup); constant-time login to prevent username enumeration. - Config: rejects known dev secret keys; validates CORS origin schemes, port range, token lifetimes. - Webhook handlers stream-read body with a 1 MiB cap; Discord 429 retries bounded (3 attempts, Retry-After capped at 60 s). - CSP + HSTS added to SecurityHeadersMiddleware. Async / runtime - SQLite engine: WAL, synchronous=NORMAL, foreign_keys=ON, busy_timeout, pool_pre_ping, dispose on shutdown. - Lifespan shutdown now stops scheduler before closing HTTP session and disposing the engine. - Shared aiohttp session locked against concurrent first-caller races; core NotificationDispatcher accepts and reuses it. - Storage and scheduled backup writes wrapped in asyncio.to_thread. - NUT client writes bounded by asyncio.wait_for. - Telegram poller switched from 3 s short-poll to 30 s interval + 25 s long-poll (~10x fewer API calls). Database - New performance-indexes migration covers every FK/owner column and hot-path composite (notification_tracker(provider_id, enabled); event_log(user_id, created_at DESC); webhook_payload_log(provider_id, created_at DESC); action_execution(action_id, started_at DESC)). - New schema_version table for future upgrade gating. - __system__ placeholder user (id=0) seeded so user_id=0 system defaults satisfy the newly enforced FK; filtered out of /auth/needs-setup, /api/users, and setup. - list_notification_trackers rewritten to batched loads (was 1+N+N*M). - Retention job extended to event_log, webhook_payload_log, and action_execution; retention days exposed as a setting. Scheduler - AsyncIOScheduler job_defaults: coalesce, misfire_grace_time=300, max_instances=1. Ops - uvicorn runs with proxy_headers, forwarded_allow_ips, timeout_graceful_shutdown; access log suppressed in non-debug. - FastAPI version string now reads from importlib.metadata. - New /api/ready endpoint separate from /api/health. - docker-compose drops the ALLOW_PRIVATE_URLS=1 default, adds mem/cpu/pid limits, read_only + tmpfs, cap_drop:ALL, no-new-privileges; healthcheck targets /api/ready. - CI now runs on push/PR with backend pytest, frontend svelte-check + build, and a non-push image build; release workflow gated on tests, publishes immutable sha-<commit> image tag, adds Trivy scan. Tests - New packages/server/tests/ with 29 passing tests: config validation, JWT round-trip + aud/alg=none rejection, SSRF scheme and private-range enforcement (sync + async), Discord bounded retry, and a lifespan-level /api/health + /api/ready smoke check. - Renamed the misnamed services/test_dispatch.py to manual_dispatch.py so pytest never auto-collects production code. Frontend - /login now redirects already-authenticated users to /, shows a distinct 'backend unreachable' banner (en/ru) when /auth/needs-setup fails.
115 lines
3.6 KiB
Svelte
115 lines
3.6 KiB
Svelte
<script lang="ts">
|
|
import { goto } from '$app/navigation';
|
|
import { onMount } from 'svelte';
|
|
import { api } from '$lib/api';
|
|
import { login } from '$lib/auth.svelte';
|
|
import { t, getLocale, setLocale } from '$lib/i18n';
|
|
import { initTheme, getTheme, setTheme, type Theme } from '$lib/theme.svelte';
|
|
import MdiIcon from '$lib/components/MdiIcon.svelte';
|
|
import AuthLayout from '$lib/components/AuthLayout.svelte';
|
|
|
|
const theme = getTheme();
|
|
let username = $state('');
|
|
let password = $state('');
|
|
let error = $state('');
|
|
let submitting = $state(false);
|
|
let mounted = $state(false);
|
|
|
|
let backendDown = $state(false);
|
|
|
|
onMount(async () => {
|
|
initTheme();
|
|
mounted = true;
|
|
// If the user is already signed in (valid access token in storage),
|
|
// there is no reason to show them the login form. loadUser() runs in
|
|
// the root layout; we just check the resolved state after a short tick.
|
|
const { isAuthenticated } = await import('$lib/api');
|
|
if (isAuthenticated()) {
|
|
try {
|
|
await api('/auth/me');
|
|
goto('/');
|
|
return;
|
|
} catch {
|
|
// Token was stale; fall through to the login form.
|
|
}
|
|
}
|
|
try {
|
|
const res = await api<{ needs_setup: boolean }>('/auth/needs-setup');
|
|
if (res.needs_setup) goto('/setup');
|
|
} catch {
|
|
// The backend is unreachable — surface that distinctly so the user
|
|
// doesn't blame the login form for a network/backend problem.
|
|
backendDown = true;
|
|
}
|
|
});
|
|
|
|
async function handleSubmit(e: SubmitEvent) {
|
|
e.preventDefault();
|
|
error = '';
|
|
submitting = true;
|
|
try {
|
|
await login(username, password);
|
|
window.location.href = '/';
|
|
} catch (err: any) {
|
|
error = err.message || t('auth.loginFailed');
|
|
}
|
|
submitting = false;
|
|
}
|
|
</script>
|
|
|
|
<AuthLayout visible={mounted}>
|
|
<!-- Controls -->
|
|
<div class="flex justify-end gap-1.5 mb-6">
|
|
<button onclick={() => { setLocale(getLocale() === 'en' ? 'ru' : 'en'); }}
|
|
class="auth-control-btn">
|
|
{getLocale().toUpperCase()}
|
|
</button>
|
|
<button onclick={() => { const o: Theme[] = ['light','dark','system']; setTheme(o[(o.indexOf(theme.current)+1)%3]); }}
|
|
class="auth-control-btn">
|
|
<MdiIcon name={theme.resolved === 'dark' ? 'mdiWeatherNight' : 'mdiWeatherSunny'} size={13} />
|
|
</button>
|
|
</div>
|
|
|
|
<!-- Logo / title -->
|
|
<div class="text-center mb-8">
|
|
<div class="auth-logo-icon">
|
|
<MdiIcon name="mdiLan" size={28} />
|
|
</div>
|
|
<h1 class="text-xl font-semibold mt-4 tracking-tight">
|
|
<span style="color: var(--color-primary);">Notify</span> Bridge
|
|
</h1>
|
|
<p class="text-sm mt-1" style="color: var(--color-muted-foreground);">{t('auth.signInTitle')}</p>
|
|
</div>
|
|
|
|
{#if backendDown}
|
|
<div class="auth-error animate-fade-slide-in">
|
|
<MdiIcon name="mdiAlertCircle" size={16} />
|
|
{t('auth.backendUnreachable')}
|
|
</div>
|
|
{:else if error}
|
|
<div class="auth-error animate-fade-slide-in">
|
|
<MdiIcon name="mdiAlertCircle" size={16} />
|
|
{error}
|
|
</div>
|
|
{/if}
|
|
|
|
<form onsubmit={handleSubmit} class="space-y-4">
|
|
<div>
|
|
<label for="username" class="auth-label">{t('auth.username')}</label>
|
|
<input id="username" type="text" bind:value={username} required
|
|
class="auth-input" placeholder="admin" />
|
|
</div>
|
|
<div>
|
|
<label for="password" class="auth-label">{t('auth.password')}</label>
|
|
<input id="password" type="password" bind:value={password} required
|
|
class="auth-input" />
|
|
</div>
|
|
<button type="submit" disabled={submitting} class="auth-submit">
|
|
{#if submitting}
|
|
<div class="w-4 h-4 rounded-full border-2 border-current border-t-transparent animate-spin"></div>
|
|
{/if}
|
|
{submitting ? t('auth.signingIn') : t('auth.signIn')}
|
|
</button>
|
|
</form>
|
|
</AuthLayout>
|