vango

package module

Go to main page

Versions in this module

v0

v0.2.4

May 24, 2026

v0.2.3

May 24, 2026

v0.2.2

May 23, 2026

Changes in this version

+ func PublicOriginFromEnv(fallback string) string

type SecurityConfig

+ func SecurityConfigFromEnv(fallbackOrigin string) SecurityConfig

v0.2.1

May 14, 2026

v0.2.0

May 12, 2026

Changes in this version

+ const DevModeRiskAcceptanceV1

+ const HeuristicEventPayloadRiskAcceptanceV1

+ const HostedSurfaceAllowedOriginsEnv

+ const HostedSurfaceProofSecretEnv

+ const HostedSurfaceTokenSecretEnv

+ const InsecureModuleOriginsRiskAcceptanceV1

+ const UnsafeConfigCodeDevMode

+ const UnsafeConfigCodeHeuristicEventPayloads

+ const UnsafeConfigCodeInsecureModuleOrigins

+ const UnsafeConfigCodeTrustSessionID

+ const UnsafeConfigCodeUnsafeRawHTML

+ const UnsafeConfigSeverityCritical

+ const UnsafeConfigSeverityHigh

+ const UnsafeConfigSeverityModerate

+ const UnsafeConfigStateActive

+ const UnsafeConfigStatePermission

+ const UnsafeRawHTMLRiskAcceptanceV1

+ func InSessionLoop() bool

+ func OnEventValidated(name string, validate HookEventValidator, handler func(HookEvent)) vdom.Attr

type App

+ func (a *App) UnsafeConfigReport() server.UnsafeConfigReport

type HookEventValidator

+ func HookValidatorMap(validators map[string]HookEventValidator) HookEventValidator

+ type HostedSurfaceSecurityConfig struct

+ AllowedOrigins []string

+ Enabled bool

+ ProofSecret []byte

+ TokenSecret []byte

+ func HostedSurfaceSecurityFromEnv(allowedOrigins ...string) HostedSurfaceSecurityConfig

type IslandMessageValidator

+ func IslandValidatorMap(validators map[string]IslandMessageValidator) IslandMessageValidator

+ type RuntimeUnsafePermissions = vdom.RuntimeUnsafePermissions

type ScriptsOption

+ func WithAllowInsecureModuleOriginsAcknowledged(token string) ScriptsOption

+ func WithAllowUnsafeRawHTMLAcknowledged(token string) ScriptsOption

+ func WithRuntimeUnsafePermissions(perms RuntimeUnsafePermissions) ScriptsOption

type SecurityConfig

+ AllowDevModeInNonLocalEnvironment bool

+ AllowInsecureModuleOriginsInProduction bool

+ DevModeRiskAcceptance string

+ HostedSurface HostedSurfaceSecurityConfig

+ HostedSurfaceTokenSecret []byte

+ HostedSurfaceVerifier server.HostedSurfaceVerifyFunc

+ InsecureModuleOriginsRiskAcceptance string

+ UnsafeRawHTMLRiskAcceptance string

type SessionConfig

+ AllowHeuristicEventPayloadsInProduction bool

+ HeuristicEventPayloadRiskAcceptance string

+ MaxMemoryPerSessionBytes int64

+ type UnsafeConfigCode = server.UnsafeConfigCode

+ type UnsafeConfigEntry = server.UnsafeConfigEntry

+ type UnsafeConfigReport = server.UnsafeConfigReport

+ type UnsafeConfigSeverity = server.UnsafeConfigSeverity

+ type UnsafeConfigState = server.UnsafeConfigState

type WasmMessageValidator

+ func WasmValidatorMap(validators map[string]WasmMessageValidator) WasmMessageValidator

v0.1.0

Apr 2, 2026

Changes in this version

+ const Alt

+ const Ctrl

+ const Meta

+ const Shift

+ var CSRFCtxToken = server.CSRFCtxToken

+ var Invalid = corevango.Invalid

+ var RedirectTo = corevango.RedirectTo

+ func UserFromContextAs[T any](ctx context.Context) (T, bool)

+ type ActionCtx = corevango.ActionCtx

type App

+ func (a *App) PageAction(path string, handler any)

+ type FormErrors = corevango.FormErrors

+ type FormResult = corevango.FormResult

+ type KeyMod = corevango.KeyMod

type ModifiedHandler

+ func Capture(handler any) ModifiedHandler

+ func Debounce(duration time.Duration, handler any) ModifiedHandler

+ func Hotkey(key string, handler any) ModifiedHandler

+ func KeyWithModifiers(key string, mods KeyMod, handler any) ModifiedHandler

+ func Keys(keys []string, handler any) ModifiedHandler

+ func Once(handler any) ModifiedHandler

+ func Passive(handler any) ModifiedHandler

+ func Self(handler any) ModifiedHandler

+ func StopPropagation(handler any) ModifiedHandler

+ func Throttle(duration time.Duration, handler any) ModifiedHandler

v0.0.3

Mar 10, 2026

Changes in this version

type SSRConfig

+ PageTimeout *time.Duration

+ type ScriptsOption = vdom.ScriptsOption

+ func WithAllowInsecureModuleOrigins() ScriptsOption

+ func WithAllowSrcdoc() ScriptsOption

+ func WithAllowUnsafeRawHTML() ScriptsOption

+ func WithCSRFToken(token string) ScriptsOption

+ func WithDebug() ScriptsOption

+ func WithModuleOrigins(origins ...string) ScriptsOption

+ func WithScriptPath(path string) ScriptsOption

+ func WithoutDefer() ScriptsOption

type SecurityConfig

+ PublicRuntimePrefix string

type VNode

+ func RuntimeScripts(ctx Ctx, opts ...ScriptsOption) *VNode

v0.0.2

Mar 6, 2026

Changes in this version

+ const TrustSessionIDRiskAcceptanceV1

+ type Principal = auth.Principal

type SecurityConfig

+ AllowUnsafeRawHTMLInProduction bool

type SessionConfig

+ TrustSessionIDRiskAcceptance string

v0.0.1

Feb 24, 2026

Changes in this version

+ const ActionError

+ const ActionIdle

+ const ActionRejectDropWhileRunning

+ const ActionRejectQueueFull

+ const ActionRunning

+ const ActionSuccess

+ const AuthCustom

+ const AuthExpiredActiveRevalidateFailed

+ const AuthExpiredNoRevalidationHooks

+ const AuthExpiredOnDemandRevalidateFailed

+ const AuthExpiredPassiveExpiry

+ const AuthExpiredResumeRehydrateFailed

+ const AuthExpiredUnknown

+ const AuthResumePolicyStrict

+ const AuthResumePolicyTrustSessionID

+ const DefaultFormMaxBytes

+ const EvictionLRU

+ const EvictionOldest

+ const EvictionRandom

+ const FailClosed

+ const FailOpenWithGrace

+ const ForceReload

+ const KindComponent

+ const KindElement

+ const KindFragment

+ const KindRaw

+ const KindText

+ const NavigateTo

+ var ActionOnError = corevango.ActionOnError

+ var ActionOnStart = corevango.OnActionStart

+ var ActionOnSuccess = corevango.ActionOnSuccess

+ var ActionTxName = corevango.ActionTxName

+ var BadRequest = corevango.BadRequest

+ var BadRequestf = corevango.BadRequestf

+ var Batch = corevango.Batch

+ var CancelLatest = corevango.CancelLatest

+ var Conflict = corevango.Conflict

+ var DevMode = &corevango.DevMode

+ var DropWhileRunning = corevango.DropWhileRunning

+ var ErrActionRunning = corevango.ErrActionRunning

+ var ErrAuthCheckPanicked = server.ErrAuthCheckPanicked

+ var ErrBudgetExceeded = corevango.ErrBudgetExceeded

+ var ErrQueueFull = corevango.ErrQueueFull

+ var Forbidden = corevango.Forbidden

+ var InternalError = corevango.InternalError

+ var Interval = corevango.Interval

+ var NotFound = corevango.NotFound

+ var OnActionRejected = corevango.OnActionRejected

+ var Queue = corevango.Queue

+ var ServiceUnavailable = corevango.ServiceUnavailable

+ var StrictConcurrency = &corevango.StrictConcurrency

+ var Timeout = corevango.Timeout

+ var Tx = corevango.Tx

+ var TxNamed = corevango.TxNamed

+ var Unauthorized = corevango.Unauthorized

+ var UnprocessableEntity = corevango.UnprocessableEntity

+ var Untracked = corevango.Untracked

+ var WithNavigateParams = server.WithNavigateParams

+ var WithReplace = server.WithReplace

+ var WithoutScroll = server.WithoutScroll

+ func Async(fn func(value any) (error, bool)) *form.AsyncValidator

+ func DecodeHookPayload[T any](event HookEvent) (T, error)

+ func DecodeIslandPayload[T any](msg IslandMessage) (T, error)

+ func DecodeWasmPayload[T any](msg WasmMessage) (T, error)

+ func DisableGlobalSignalRefresh() *time.Duration

+ func EqualTo(field string, msg string) *form.EqualToField

+ func Func(render func() *vdom.VNode) vdom.Component

+ func GlobalSignalRefreshInterval(d time.Duration) *time.Duration

+ func Hook(name string, config any) vdom.Attr

+ func NoResume() *time.Duration

+ func NotEqualTo(field string, msg string) *form.NotEqualToField

+ func OnEvent(name string, handler func(HookEvent)) vdom.Attr

+ func ParseForm(r *http.Request, dst any) error

+ func ParseFormData(fd FormData, dst any) error

+ func ParseFormWithLimit(r *http.Request, dst any, maxBytes int64) error

+ func ResumeWindow(d time.Duration) *time.Duration

+ func Setup[P any](p P, fn func(corevango.SetupCtx[P]) corevango.RenderFn) corevango.Component

+ func UntrackedGet[T any](s *Signal[T]) T

+ func UserFromContext(ctx context.Context) any

+ func WithUser(ctx context.Context, user any) context.Context

+ type APIConfig struct

+ MaxBodyBytes int64

+ RequireJSONContentType bool

+ func DefaultAPIConfig() APIConfig

+ type APIHandler = any

+ type Action = corevango.Action[A, R]

+ type ActionHandler = corevango.ActionHandler[A, R]

+ func OnActionError[A any, R any](fn func(error) *vdom.VNode) ActionHandler[A, R]

+ func OnActionIdle[A any, R any](fn func() *vdom.VNode) ActionHandler[A, R]

+ func OnActionRunning[A any, R any](fn func() *vdom.VNode) ActionHandler[A, R]

+ func OnActionSuccess[A any, R any](fn func(R) *vdom.VNode) ActionHandler[A, R]

+ type ActionOption = corevango.ActionOption

+ type ActionRejection = corevango.ActionRejection

+ type ActionRejectionReason = corevango.ActionRejectionReason

+ type ActionState = corevango.ActionState

+ type AnimationEvent = corevango.AnimationEvent

+ type App struct

+ func MustNew(cfg Config) *App

+ func New(cfg Config) (*App, error)

+ func (a *App) API(method, path string, handler APIHandler)

+ func (a *App) Config() Config

+ func (a *App) HandleUpload(path string, store upload.Store)

+ func (a *App) HandleUploadWithConfig(path string, store upload.Store, config *upload.Config)

+ func (a *App) Handler() http.Handler

+ func (a *App) Layout(path string, handler LayoutHandler)

+ func (a *App) Middleware(path string, mw ...RouteMiddleware)

+ func (a *App) Page(path string, handler PageHandler, layouts ...LayoutHandler)

+ func (a *App) Router() *router.Router

+ func (a *App) Run(ctx context.Context, addr string) error

+ func (a *App) RunAddr(addr string) error

+ func (a *App) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ func (a *App) Server() *server.Server

+ func (a *App) SetErrorPage(handler func(Ctx, error) *VNode)

+ func (a *App) SetNotFound(handler PageHandler)

+ func (a *App) Use(mw ...RouteMiddleware)

+ type AssetManifest = assets.Manifest

+ func LoadAssetManifest(path string) (*AssetManifest, error)

+ type AssetResolver = assets.Resolver

+ func NewAssetResolver(m *AssetManifest, prefix string) AssetResolver

+ func NewPassthroughResolver(prefix string) AssetResolver

+ type Attr = vdom.Attr

+ type AuthCheckConfig = server.AuthCheckConfig

+ type AuthExpiredAction = server.AuthExpiredAction

+ type AuthExpiredConfig = server.AuthExpiredConfig

+ type AuthExpiredReason = server.AuthExpiredReason

+ type AuthFailureMode = server.AuthFailureMode

+ type AuthResumePolicy = server.AuthResumePolicy

+ type CacheControlStrategy int

+ const CacheControlNone

+ const CacheControlProduction

+ type Cleanup = corevango.Cleanup

+ func GoLatest[K comparable, R any](key K, work func(ctx context.Context, key K) (R, error), ...) Cleanup

+ func Subscribe[T any](stream corevango.Stream[T], fn func(T), opts ...corevango.SubscribeOption) Cleanup

+ type Component = vdom.Component

+ type Config struct

+ API APIConfig

+ DevMode bool

+ GlobalSignalPubSub GlobalBroadcastBackend

+ GlobalSignalRefreshInterval *time.Duration

+ Logger *slog.Logger

+ Metrics MetricsSink

+ Observability ObservabilityConfig

+ OnSessionResume func(httpCtx context.Context, s *Session) error

+ OnSessionStart func(httpCtx context.Context, s *Session)

+ SSR SSRConfig

+ Security SecurityConfig

+ Session SessionConfig

+ Static StaticConfig

+ StrictConcurrency bool

+ func DefaultConfig() Config

+ type CookieOption = server.CookieOption

+ func WithCookieHTTPOnly(enabled bool) CookieOption

+ type Ctx = server.Ctx

+ func UseCtx() Ctx

+ type DragEvent = corevango.DragEvent

+ type DropEvent = corevango.DropEvent

+ type EventRateLimitConfig = corevango.EventRateLimitConfig

+ func DefaultDOMEventRateLimitConfig() *EventRateLimitConfig

+ func DefaultEventRateLimitConfig() *EventRateLimitConfig

+ type Form = form.Form[T]

+ type FormData = corevango.FormData

+ func NewFormData(values map[string][]string) FormData

+ func NewFormDataFromSingle(values map[string]string) FormData

+ type GlobalBroadcastBackend = corevango.GlobalBroadcastBackend

+ func NewMemoryPubSub() GlobalBroadcastBackend

+ func NewRedisPubSub(client *redis.Client) GlobalBroadcastBackend

+ func ParsePubSubURL(raw string) (GlobalBroadcastBackend, error)

+ type HTTPError = corevango.HTTPError

+ type Handler = corevango.Handler[T]

+ func OnError[T any](fn func(error) *vdom.VNode) Handler[T]

+ func OnLoadingOrPending[T any](fn func() *vdom.VNode) Handler[T]

+ func OnLoading[T any](fn func() *vdom.VNode) Handler[T]

+ func OnPending[T any](fn func() *vdom.VNode) Handler[T]

+ func OnReady[T any](fn func(T) *vdom.VNode) Handler[T]

+ type HookEvent = corevango.HookEvent

+ type HookEventValidator = corevango.HookEventValidator

+ func HookSchemaValidator[T any](validate func(HookEvent, T) error) HookEventValidator

+ type InputEvent = corevango.InputEvent

+ type IslandMessage = corevango.IslandMessage

+ type IslandMessageValidator = corevango.IslandMessageValidator

+ func IslandSchemaValidator[T any](validate func(IslandMessage, T) error) IslandMessageValidator

+ type KeyboardEvent = corevango.KeyboardEvent

+ type LayoutHandler = func(Ctx, Slot) *VNode

+ type Memo = corevango.Memo[T]

+ type MetricsSink = corevango.MetricsSink

+ type ModifiedHandler = corevango.ModifiedHandler

+ func PreventDefault(handler any) ModifiedHandler

+ type MouseEvent = corevango.MouseEvent

+ type NavigateEvent = corevango.NavigateEvent

+ type NavigateOption = server.NavigateOption

+ type NoProps = corevango.NoProps

+ type ObservabilityConfig = corevango.ObservabilityConfig

+ type PageHandler = any

+ type PagedResponse = corevango.PagedResponse[T]

+ type Props = vdom.Props

+ type PropsCell = corevango.PropsCell[P]

+ type RenderFn = corevango.RenderFn

+ type ResizeEvent = corevango.ResizeEvent

+ type Resource = corevango.Resource[T]

+ type ResourceOption = corevango.ResourceOption

+ func OnResourceError(fn func(error)) ResourceOption

+ func OnResourceSuccess(fn func(any)) ResourceOption

+ func RetryOnError(count int, delay time.Duration) ResourceOption

+ func StaleTime(d time.Duration) ResourceOption

+ type ResourceState = corevango.State

+ const Error

+ const Loading

+ const Pending

+ const Ready

+ type Response = corevango.Response[T]

+ func Accepted[T any](data T) *Response[T]

+ func Created[T any](data T) *Response[T]

+ func NoContent[T any]() *Response[T]

+ func OK[T any](data T) *Response[T]

+ func Paginated[T any](items []T, page, perPage, total int) *Response[PagedResponse[T]]

+ type RouteMiddleware = router.Middleware

+ type RouteMiddlewareFunc = router.MiddlewareFunc

+ type SSRConfig struct

+ EnableResourcePreload *bool

+ ResourceTimeout *time.Duration

+ type ScrollEvent = corevango.ScrollEvent

+ type SecurityConfig struct

+ AllowCustomOriginPolicy bool

+ AllowSameOrigin bool

+ AllowedHosts []string

+ AllowedOrigins []string

+ AllowedRedirectHosts []string

+ CSRFEnabled bool

+ CSRFSecret []byte

+ CanonicalHost string

+ CookieDomain string

+ CookieHttpOnly bool

+ CookieSameSite http.SameSite

+ CookieSecure bool

+ CustomOriginCheck func(r *http.Request) bool

+ SecurityHeaders SecurityHeadersConfig

+ TrustedProxies []string

+ URLPolicy *URLPolicyConfig

+ type SecurityHeadersConfig struct

+ CSP string

+ CSPEnabled bool

+ CSPOptions *server.CSPOptions

+ CSPReportOnly bool

+ ContentTypeNosniff bool

+ Enabled bool

+ FrameOptions string

+ HSTSIncludeSubdomains bool

+ HSTSMaxAge time.Duration

+ HSTSPreload bool

+ PermissionsPolicy string

+ ReferrerPolicy string

+ func DefaultSecurityHeadersConfig() SecurityHeadersConfig

+ func HardenedSecurityHeadersConfig() SecurityHeadersConfig

+ type Session = server.Session

+ type SessionConfig struct

+ AllowRawHTMLInEventPayloads bool

+ AllowTrustSessionIDInProduction bool

+ AuthCheck *AuthCheckConfig

+ AuthResumePolicy AuthResumePolicy

+ DOMEventRateLimit *EventRateLimitConfig

+ EvictOnIPLimit bool

+ EvictionPolicy SessionEvictionPolicy

+ HookEventMaxPayloadBytes int

+ HookEventRateLimit *EventRateLimitConfig

+ HookEventValidator HookEventValidator

+ IslandEventMaxPayloadBytes int

+ IslandEventRateLimit *EventRateLimitConfig

+ IslandMessageValidator IslandMessageValidator

+ MaxBlobAge time.Duration

+ MaxDetachedSessions int

+ MaxHandshakePathBytes int

+ MaxSessionsPerIP int

+ PersistenceSecret []byte

+ PersistenceSecretPrevious []byte

+ ResumeWindow *time.Duration

+ StateBudget *StateBudgetConfig

+ Store SessionStore

+ StormBudget *StormBudgetConfig

+ WasmEventMaxPayloadBytes int

+ WasmEventRateLimit *EventRateLimitConfig

+ WasmMessageValidator WasmMessageValidator

+ func DefaultSessionConfig() SessionConfig

+ type SessionEvictionPolicy = server.SessionEvictionPolicy

+ type SessionKey = corevango.SessionKey[T]

+ func NewSessionKey[T any](name string, opts ...SessionKeyOption[T]) *SessionKey[T]

+ type SessionKeyOption = corevango.SessionKeyOption[T]

+ func Default[T any](v T) SessionKeyOption[T]

+ type SessionStore = session.SessionStore

+ type SetupCtx = corevango.SetupCtx[P]

+ type Signal = corevango.Signal[T]

+ type Slot = corevango.Slot

+ func Children(children ...any) Slot

+ type StateBudgetConfig = corevango.StateBudgetConfig

+ type StaticConfig struct

+ CacheControl CacheControlStrategy

+ Compression bool

+ Dir string

+ Headers map[string]string

+ Prefix string

+ func DefaultStaticConfig() StaticConfig

+ type StormBudgetConfig = server.StormBudgetConfig

+ type Touch = corevango.Touch

+ type TouchEvent = corevango.TouchEvent

+ type TransitionEvent = corevango.TransitionEvent

+ type URLEncoding = urlparam.Encoding

+ const URLEncodingComma

+ const URLEncodingFlat

+ const URLEncodingJSON

+ type URLParamOption = urlparam.URLParamOption

+ var Push URLParamOption = urlparam.Push

+ var Replace URLParamOption = urlparam.Replace

+ func Encoding(e URLEncoding) URLParamOption

+ func URLDebounce(d time.Duration) URLParamOption

+ type URLPolicyConfig struct

+ AllowSrcdoc bool

+ AllowUnsafeRawHTML bool

+ AllowedActionSchemes []string

+ AllowedHrefSchemes []string

+ AllowedResourceSchemes []string

+ type VKind = vdom.VKind

+ type VNode = vdom.VNode

+ type ValidationError = form.ValidationError

+ type Validator = form.Validator

+ func Alpha(msg string) Validator

+ func AlphaNumeric(msg string) Validator

+ func Between(min, max any, msg string) Validator

+ func Custom(fn func(value any) error) Validator

+ func DateAfter(t time.Time, msg string) Validator

+ func DateBefore(t time.Time, msg string) Validator

+ func Email(msg string) Validator

+ func Future(msg string) Validator

+ func Max(n any, msg string) Validator

+ func MaxLength(n int, msg string) Validator

+ func Min(n any, msg string) Validator

+ func MinLength(n int, msg string) Validator

+ func NonNegative(msg string) Validator

+ func Numeric(msg string) Validator

+ func Past(msg string) Validator

+ func Pattern(pattern, msg string) Validator

+ func Phone(msg string) Validator

+ func Positive(msg string) Validator

+ func Required(msg string) Validator

+ func URL(msg string) Validator

+ func UUID(msg string) Validator

+ type ValidatorFunc = form.ValidatorFunc

+ type WasmMessage = corevango.WasmMessage

+ type WasmMessageValidator = corevango.WasmMessageValidator

+ func WasmSchemaValidator[T any](validate func(WasmMessage, T) error) WasmMessageValidator

+ type WheelEvent = corevango.WheelEvent

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL