summaryrefslogtreecommitdiffhomepage
path: root/HTTP/Server.hs
Commit message (Collapse)AuthorAge
* Fix build with some versions of servant.Joey Hess2017-04-03
| | | | | | Application is exported by Servant 0.8.1, but apparently not by some other versions that the cabal file allows to be used. Explictly import from Network.Wai
* Updated to use raaz-0.1.1.Joey Hess2017-03-03
| | | | This commit was sponsored by John Peloquin on Patreon.
* move level from Server to StorageJoey Hess2016-10-06
| | | | | | | This allows local storage locations to have levels too, and also get shuffled nicely. This commit was sponsored by Ethan Aubin.
* Server: Round number of objects down to the nearest thousand, to avoid ↵Joey Hess2016-09-27
| | | | leaking too much data about when objects are uploaded to servers.
* Server: --motd can be used to provide a Message Of The Day.Joey Hess2016-09-27
| | | | This commit was sponsored by Anthony DeRobertis on Patreon.
* Added --backup-server and --restore-serverJoey Hess2016-09-15
| | | | | | To aid in backing up keysafe servers with minimal information leakage. This commit was sponsored by Andrea Rota.
* Revert "add date to logger"Joey Hess2016-09-14
| | | | | | This reverts commit 0f0aa21ea11f6eae368326b178d4c3eaf5cc5186. Dunno why, but this prevents it printing anything. Needs investigation.
* add date to loggerJoey Hess2016-09-13
|
* use fast-logger for better loggingJoey Hess2016-09-13
|
* implemented dynamic rate limitingJoey Hess2016-09-13
|
* add proof of work to countobjectsJoey Hess2016-09-12
| | | | In this case, an empty string is hashed to generate the PoW.
* implement client-server Proof Of WorkJoey Hess2016-09-12
| | | | | | | | | | | | | | | | | | | Mashed up a argon2-based PoW with token buckets and bloom filters. This is intended to prevent a few abuses including: * Using a keysafe server for general file storage, by storing a whole lot of chunks. * An attacker guessing names that people will use, and uploading junk to keysafe servers under those names, to make it harder for others to use keysafe later. * An attacker trying to guess the names used for objects on keysafe servers in order to download them and start password cracking. (As a second level of defense, since the name generation hash is expensive already.) Completely untested, but it builds! This commit was sponsored by Andreas on Patreon.
* new moduleJoey Hess2016-09-12
|
* added --store-directoryJoey Hess2016-08-31
|
* Added basic test suite.Joey Hess2016-08-30
|
* make server default to only listening to localhostJoey Hess2016-08-29
| | | | | This way, the tor hidden service using it will be the only way it's exposed.
* refactorJoey Hess2016-08-28
|
* better error for invalid object sizeJoey Hess2016-08-28
|
* simplify http api, remove apiversionJoey Hess2016-08-28
| | | | Not needed since all routes are tagged with the api version.
* http: refuse to store object of unexpected sizeJoey Hess2016-08-28
|
* add stJoey Hess2016-08-22
|
* avoid globalJoey Hess2016-08-22
|
* obscure on startupJoey Hess2016-08-22
| | | | | This way, if the server is killed before it can obscure, make sure things get obscured.
* wire up client to Storage.NetworkJoey Hess2016-08-22
|
* added obscurer thread to serverJoey Hess2016-08-22
|
* wire up server to file storageJoey Hess2016-08-22
|
* return ProofOfWorkRequirement tJoey Hess2016-08-22
| | | | This way the requirement can be varied for different operations.
* http client, and --serverJoey Hess2016-08-20
|
* initial http api using servantJoey Hess2016-08-20