Documentation
¶
Overview ¶
Package web provides a web UI module with server-rendered HTML pages.
Index ¶
Constants ¶
const Name = "web"
Variables ¶
This section is empty.
Functions ¶
func AttachCSRFForTest ¶ added in v0.97.8
AttachCSRFForTest sets a fixed CSRF cookie and matching X-CSRF-Token header on req. Use for unit and BDD tests that perform state-changing /service/web requests. Safe to call after Header.Set("Cookie", ...) — appends csrfToken to the Cookie header.
func InitForE2E ¶
func InitForE2E(configData json.RawMessage) error
InitForE2E initializes the web module handler for e2e testing. It calls the package-level handler.Init with the provided JSON config, bypassing the uber/fx dependency injection used in production.
func MountForE2E ¶
MountForE2E mounts web module routes onto the given Fiber app.
func SetLoginRateLimiterCache ¶
func SetLoginRateLimiterCache(s *cache.RedisStore)
SetLoginRateLimiterCache stores the Redis backend for the login rate limiter. The limiter is wired after web module Init so YAML auth.brute_force is applied.
Types ¶
type AuthConfig ¶
type AuthConfig struct {
Username string `json:"username"`
Password string `json:"password"`
PasswordHash string `json:"password_hash"`
CookieSecure *bool `json:"cookie_secure"`
BruteForce BruteForceConfig `json:"brute_force"`
}
AuthConfig holds web login authentication credentials read from the module config. Configure either Password (development plaintext) or PasswordHash (bcrypt, production).
type BruteForceConfig ¶
type BruteForceConfig struct {
// Enabled turns protection on when true or omitted (nil). Set false to disable.
Enabled *bool `json:"enabled"`
// MaxAttempts is when progressive delay starts (0 = default 5).
MaxAttempts int64 `json:"max_attempts"`
// LockoutAttempts is when full lockout starts (0 = default 10).
LockoutAttempts int64 `json:"lockout_attempts"`
// LockoutDuration is how long lockout lasts (empty = default 15m).
LockoutDuration string `json:"lockout_duration"`
// WindowDuration is the sliding window for attempt counts (empty = default 15m).
WindowDuration string `json:"window_duration"`
}
BruteForceConfig holds brute force protection settings for the login endpoint.
Source Files
¶
- agent_memory_webservice.go
- agent_scheduled_tasks_webservice.go
- agent_sessions_webservice.go
- agent_skills_webservice.go
- agent_subagents_webservice.go
- agents_webservice.go
- auth.go
- auth_password.go
- chatagent_permissions_webservice.go
- chatagent_web_stream.go
- clip_webservice.go
- clips_list_webservice.go
- config_webservice.go
- csrf.go
- event_webservice.go
- healthz_webservice.go
- home_webservice.go
- homelab_webservice.go
- hub_webservice.go
- login_webservice.go
- module.go
- notification_webservice.go
- notify_playground_webservice.go
- notify_settings_webservice.go
- pipeline_webservice.go
- ratelimit.go
- relations_webservice.go
- rules.go
- token_webservice.go
- utils.go
- view_types.go
- view_webservice.go