CodeNavigator

7 Commits 1 Branch 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
Andy Dixon	26800b9b66	Scope jobs and snapshots to a browser session An HttpOnly, SameSite=Lax session cookie is issued when a job is created. Job and snapshot routes return 404 to any other session, so indexed source is only readable by the browser that loaded it.	2026-02-15 10:53:01 +00:00
Andy Dixon	d8d4a77ba7	Use random job and snapshot IDs Timestamp-derived IDs were guessable, and the ID is what grants access to indexed source. crypto/rand.Text gives 26 base32 characters.	2026-02-07 12:18:26 +00:00
Andy Dixon	5816dea6b1	Add Go HTTP/SSE API server with embedded frontend Implements the API routes (jobs, progress events, snapshots, search, entities, source delivery with release) to net/http and serves the static frontend from the same binary on the same origin.	2026-01-25 09:10:28 +00:00

Author

SHA1

Message

Date

Andy Dixon

26800b9b66

Scope jobs and snapshots to a browser session

An HttpOnly, SameSite=Lax session cookie is issued when a job is
created. Job and snapshot routes return 404 to any other session, so
indexed source is only readable by the browser that loaded it.

2026-02-15 10:53:01 +00:00

Andy Dixon

d8d4a77ba7

Use random job and snapshot IDs

Timestamp-derived IDs were guessable, and the ID is what grants access
to indexed source. crypto/rand.Text gives 26 base32 characters.

2026-02-07 12:18:26 +00:00

Andy Dixon

5816dea6b1

Add Go HTTP/SSE API server with embedded frontend

Implements the API routes (jobs, progress events, snapshots, search,
entities, source delivery with release) to net/http and serves the
static frontend from the same binary on the same origin.

2026-01-25 09:10:28 +00:00