alina sireneva
a6623567e2
feat: support external proxies ( #588 )
2024-07-24 21:49:47 +06:00
dumbmoron
85e376bffd
api: move accept header check into handler, simplify error handling ( #614 )
2024-07-24 17:27:26 +02:00
dumbmoron
92f3d2366c
api: use spread operator for merging headers
2024-07-06 11:40:41 +00:00
dumbmoron
3096bc9df0
api: use Map for internal stream headers instead of plain object
2024-07-06 11:36:25 +00:00
dumbmoron
315ddb17c1
web/onDemand: check blockId is string, early return if not
2024-07-06 08:59:02 +00:00
jj
d2e5b6542f
api: randomize cipherlist for making requests to services ( #574 )
...
this makes cobalt less prone to TLS client fingerprinting, as it
avoids having the default node.js TLS fingerprint that is shared by
all node.js applications.
2024-06-15 18:20:33 +02:00
dumbmoron
7c39b10435
api/istream: flip priority of header sources
...
closes #526
2024-05-28 06:19:42 +00:00
dumbmoron
d72be2c95a
api: clean up and remove unnecessary res.destroy()s
2024-05-23 22:37:58 +06:00
jj
72246cbc1f
tiktok: use new cookie for each request ( #514 )
...
* api: allow passing headers from service handler
* tiktok: use new cookie for each request
2024-05-23 22:29:39 +06:00
wukko
f9ce6ba8cc
core/web: update response functions & clean up
2024-05-16 22:36:55 +06:00
wukko
fd47ebda1c
localization: display actual rate limit window
2024-05-16 21:39:01 +06:00
wukko
b5c81084c8
api: clean up imports & consts
2024-05-16 14:20:40 +06:00
wukko
592bfe24cf
api: remove /api/status
2024-05-16 14:20:12 +06:00
wukko
adf9267905
api: expose rate limit headers
2024-05-16 13:59:53 +06:00
wukko
fb81c57324
api: remove duplicate defaults
2024-05-16 13:58:28 +06:00
wukko
391cf16c87
api: configurable rate limit through env
2024-05-16 13:54:11 +06:00
wukko
a70fc840dc
api: remove onDemand mention and slight clean up
2024-05-16 13:35:14 +06:00
dumbmoron
b13919d89b
request: rename verifyRequest to normalizeRequest
2024-05-15 17:03:33 +00:00
wukko
a305bdb78d
core/api: no longer reassign to const
2024-05-15 22:51:26 +06:00
wukko
98e05368ed
api: raw stream status responses, clean up core
2024-05-15 22:43:33 +06:00
wukko
cc6345ff63
api: move request functions to separate file
...
- request status id is no longer a cryptic number
- descriptive function names
2024-05-15 22:43:33 +06:00
dumbmoron
c10012130b
api: refactor /api/json POST handler
2024-05-15 13:29:18 +00:00
dumbmoron
0a7cdfbbfe
match: remove redundant url argument
2024-05-15 12:46:08 +00:00
dumbmoron
c5c3682462
api: get rid of getJSON
...
let's just call `match` directly
2024-05-15 12:45:23 +00:00
dumbmoron
cc1e9dcff8
api: add API_LISTEN_ADDRESS env for specifying bind address
2024-05-14 15:34:56 +06:00
wukko
3e5ccea23c
chore: remove unused imports/variables
2024-05-14 13:08:36 +06:00
wukko
e2d1913043
web: more ipad accommodations and clean up
...
- moved all user agent toggles to (legacy) frontend, like it should have always been
- removed unnecessary building
2024-05-11 01:05:24 +06:00
jsopn
5fbf35a8d3
refactor: centralize envs and their defaults in modules/config ( #464 )
...
* feat(config): centralized env variables and their default values
* fix: fip `corsWildcard` variable check in `corsConfig`
* fix(config): use already declared variables and default some strings to undefined
* fix: check processingPriority against NaN
2024-04-29 13:56:05 +02:00
wukko
78288b8fac
core/api: don't trigger verifyStream on premature probe
2024-04-28 02:34:50 +06:00
dumbmoron
66e58d21ec
feat: internal streams
2024-04-26 11:53:50 +00:00
jj
3e36c5e2ca
Merge branch '7.11' into encrypt-stream
...
Signed-off-by: jj <log@riseup.net>
2024-03-05 17:58:37 +01:00
dumbmoron
7fab5a37ff
crypto: use secret directly instead of deriving key
2024-03-05 16:49:00 +00:00
wukko
97f4528e92
core/api: update checkSafeLength
2024-03-05 21:15:32 +06:00
wukko
6ed03b0035
crypto: rename sha256 func to generateHmac
...
it has always been actually hmac
2024-03-05 20:55:17 +06:00
wukko
c22d76444b
core/api: remove unnecessary Math.floor for timestamp
2024-03-05 20:41:33 +06:00
wukko
18056dc7af
cors: revert cors name change in serverInfo
2024-03-05 20:13:01 +06:00
wukko
011a0127b4
env: rename ENABLE_CORS to CORS_WILDCARD for better clarity
2024-03-05 19:20:56 +06:00
wukko
e16ee6c1d3
env: readable environment variables in all files
...
apiPort -> API_PORT
apiURL -> API_URL
apiName -> API_NAME
cors -> ENABLE_CORS
cookiePath -> COOKIE_PATH
webPort -> WEB_PORT
webURL -> WEB_URL
showSponsors -> SHOW_SPONSORS
isBeta -> IS_BETA
2024-03-05 19:08:59 +06:00
wukko
e282a9183f
stream: encrypt cached stream data & clean up related modules
...
also limited CORS methods to GET and POST
2024-03-05 18:14:26 +06:00
wukko
f8f85b771b
api core: fix cors env variable
2024-02-16 08:39:31 +06:00
dumbmoron
a375000ae9
api: use req.ip instead of cloudflare headers, ratelimit ipv6 by prefix
...
allows for more versatile configurations that do not necessarily have to use cloudflare
also ratelimits IPv6 addresses by prefix instead of individual addresses
currently set at /56, which should not be too strict
(yet allows a /48 holder to make 256 as many requests instead of 2^80 as many requests), change if needed
2024-01-31 10:36:19 +00:00
wukko
ddc87ca42b
api: clean url upon entry, not down the road
2023-12-25 12:34:20 +00:00
wukko
afab7f94a7
api & web: ports in env are no longer strictly required
2023-12-02 22:01:58 +06:00
wukko
f4b486a236
actually use rate-limit status
2023-08-14 01:51:55 +06:00
wukko
c5681bba94
making deepsource happy
2023-08-11 22:07:34 +06:00
wukko
43a3ebf475
7.0: ui refresh and more
2023-08-05 00:43:12 +06:00
wukko
65161107fa
6.2: no more ip verification
...
- removed ip verification and updated privacy policy to reflect this change.
- streamable links now last for 20 seconds instead of 2 minutes.
- cleaned up stream verification algorithm. now the same function isn't run 4 times in a row.
- removed deprecated way of hosting a cobalt instance.
2023-06-27 19:56:15 +06:00
wukko
527ca29215
6.0
...
in this commit:
- enhanced css (hover border, less annoying donate highlight, checkbox width fix for mobile, more consistent color scheme)
- addition of an urgent notice (in this case it mentions all issues related to old infra being fixed)
- updated twitter picker test
- changelog for 6.0
- removed partial translations
2023-06-07 21:41:06 +06:00
wukko
66c797e252
oops
2023-06-05 12:47:03 +06:00
wukko
55f1e4b704
tumblr audio, youtube vr, updated setup script, further mitosis accommodations
2023-06-05 12:43:04 +06:00
