cgit/cgitrc.5.txt, branch v0.10

auth: have cgit calculate login address

2014-01-16T22:21:54Z

This way we're sure to use virtual root, or any other strangeness encountered. Signed-off-by: Jason A. Donenfeld

authentication: use hidden form instead of referer

2014-01-16T11:13:39Z

This also gives us some CSRF protection. Note that we make use of the hmac to protect the redirect value. Signed-off-by: Jason A. Donenfeld

auth: add basic authentication filter framework

2014-01-16T01:28:12Z

This leverages the new lua support. See filters/simple-authentication.lua for explaination of how this works. There is also additional documentation in cgitrc.5.txt. Though this is a cookie-based approach, cgit's caching mechanism is preserved for authenticated pages. Very plugable and extendable depending on user needs. The sample script uses an HMAC-SHA1 based cookie to store the currently logged in user, with an expiration date. Signed-off-by: Jason A. Donenfeld

filter: allow returning exit code from filter

2014-01-14T17:09:52Z

Filters can now indicate a status back to cgit by means of the exit code for exec, or the return value from close for Lua. Signed-off-by: Jason A. Donenfeld

cgitrc.5.txt: Fix documentation of the snapshot mask

2014-01-14T01:30:01Z

Mention that the snapshot setting only specifies the formats that links are generated for and not the set of formats that are accessible via HTTP. Signed-off-by: Lukas Fleischer

filter: add page source to email filter

2014-01-14T01:00:07Z

Since the email filter is called from lots of places, the script might benefit from knowing the origin. That way it can modify its contents and/or size depending. Signed-off-by: Jason A. Donenfeld

filter: add support for email filter

2014-01-14T01:00:07Z

Signed-off-by: Jason A. Donenfeld

filter: add lua support

2014-01-14T01:00:07Z

Signed-off-by: Jason A. Donenfeld

filter: introduce "filter type" prefix

2014-01-14T01:00:07Z

This allows different filter implementations to be specified in the configuration file. Currently only "exec" is supported, but it may now be specified either with or without the "exec:" prefix. Signed-off-by: John Keeping

Add a suggestion to the manpage

2014-01-08T15:48:02Z

So that people wishing to use "enable-http-clone" don't have to find out the correct settings on their own. Signed-off-by: Přemysl Janouch