pi-hole/FTL
1
0
Fork 0
mirror of https://github.com/pi-hole/FTL.git synced 2024-10-26 16:52:18 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity
5,794 Commits 20 Branches 106 Tags
b9fa29c18ce84b752eefa1f65d28053fa00a363b
Commit Graph

43 Commits

Author SHA1 Message Date
DL6ER 2dbb7f3b63 Merge pull request #1731 from pi-hole/fix/dhcp-range 
Improve DHCP handling
 2023-11-16 22:25:09 +01:00
DL6ER 503c0538ed IPv4 address 0.0.0.0 and IPv6 address :: correspond to empty strings in FTL settings 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-11-16 12:43:47 +01:00
DL6ER a69130585e Use package ipaddress for IP address validation in API tests 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-11-15 11:49:03 +01:00
DL6ER 90de6c1b83 Merge pull request #1727 from pi-hole/fix/toml_utf8 
Declare pihole.toml as UTF-8 document
 2023-11-14 22:25:04 +01:00
DL6ER 11127f0f13 Fix OpenAPI checker not being able to discover properties that are returned by FTL but not documented in the OpenAPI specs 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-11-04 17:11:37 +01:00
DL6ER 75cd372d0e Add string format verification in API checker 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-11-04 12:38:24 +01:00
DL6ER f1c59db0f6 Declare pihole.toml as UTF-8 document. we add a compile-time switch to use ASCII with UTF-8 escaping instead in case this is a necessity for anyone (I don't really expect this in the third millenial but we also know people are still using Windows XP on the web...) 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-11-03 10:12:07 +01:00
DL6ER d805bd75f4 Update test/api/checkAPI.py 
Co-authored-by: yubiuser <ckoenig@posteo.de>
Signed-off-by: DL6ER <DL6ER@users.noreply.github.com>
 2023-11-03 06:47:32 +01:00
DL6ER 15ae21e39c Clarify error wording 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-11-02 05:55:27 +01:00
DL6ER 3a67a77a08 Report number of checked endpoints in the result and warn if the number of specified endpoints in FTL and the OpenAPI specs do not match 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-11-02 05:50:32 +01:00
DL6ER 5993b66bca Add checking of all endpoints defined in FTL but not in the OpenAPI specs and vice versa 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-11-02 05:28:07 +01:00
DL6ER f4e6dfc061 Implement deep-recursion of API arrays 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-30 07:42:51 +01:00
DL6ER 2141db3d64 Add rate-limiting on password login attempts 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-07 19:59:32 +02:00
Christian König da544dcbb2 Change default webport to 80 
Signed-off-by: Christian König <ckoenig@posteo.de>
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-08-01 15:54:20 +02:00
DL6ER 813509841b Accept cookie authentication only when CSRF header is provided (and correct) 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-06-04 19:29:54 +02:00
Christian König 62cfc25b95 Fix spelling in v6 
Signed-off-by: Christian König <ckoenig@posteo.de>
 2023-05-30 22:42:13 +02:00
DL6ER 19c72d354e !!! BREAKING CHANGE !!! Switch to the proven memory-hard password-hashing alogorithm BALLOON. The stored password hash will be upgraded on the first successdful login. To wave the necessity to implement BALLOON with every client trying to access the API, we remove the existing challenge-response authentication in favor of allowing login straight with the password. This has been avoided in the past, however, seems now acceptable that FTL (even by default) offers secure end-to-end encryption over HTTPS. 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-05-30 21:22:45 +02:00
DL6ER 149ec4e0dd Add test for re-importing the just exported Teleporter file during the tests 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-26 20:11:55 +01:00
DL6ER 48fc06d46b Add POST /api/teleporter to upload and install backed up configuration 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-25 21:51:12 +01:00
DL6ER e4383775d1 Add /api/action/gravity which can be used to trigger a run of pihole -g. The output is live streamed using HTTP/1.1 chunked encoding. 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-24 20:15:45 +01:00
DL6ER 13168c377b Add GET /api/teleporter 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-23 21:56:11 +01:00
DL6ER 88e8ab9fd5 !!! BREAKING CHANGE !!! Redesign TOML config structure 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-22 12:32:10 +01:00
DL6ER 47ac129a53 !!! BREAKING CHANGE !!! Rename pihole-FTL.toml to pihole.toml and it is a Pi-hole wide config file also covering all the dnsmasq settings, etc. 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-22 10:01:54 +01:00
DL6ER 2d6c25d573 Add GET /config/{element} for more specific requests as well as PATCH and DELETE /config/{element}/{value} for direct array manipulation 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-18 18:19:19 +01:00
DL6ER c34975180e Rename /api/ftl/endpoints -> /api/endpoints 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-16 21:37:11 +01:00
DL6ER 5e96022e63 Group endpoints in /api/ftl/endpoints by supported methods 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-16 21:11:57 +01:00
DL6ER 140a365806 Tests: Set api.pwhash and dns.blocking.mode using PATCH /api/config 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-08 21:29:55 +01:00
DL6ER f199ac2f08 Automatically migrate the API password hash and the lists of clients and domains to be excluded from setupVars.conf 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-08 21:21:38 +01:00
DL6ER 1414e0d397 Ensure checkAPI.py also accepts situations with localAPIauth = false 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-08 20:59:18 +01:00
DL6ER 4ac52263e9 Implement login for python API checking script 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-08 16:04:26 +01:00
DL6ER 3c5c1d52b7 Transform log_debug() into a function-like macro to save some time when we are not in debugging mode (the function is not called in this case) 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-08 09:55:51 +01:00
DL6ER b8354c515c Fix debug flag parsing after changing from bit-wise flags to individual bools 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-07 20:08:38 +01:00
DL6ER 8efd253529 Merge remote-tracking branch 'origin/development' into new/http 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-07 18:37:13 +01:00
DL6ER e145d20d28 Rewrite the entire config-related code to allow for changing data without having to restart. Hereby, we greatly reduce code duplication in the TOML routines so we won't have to touch tme in the future when adding additional options. 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-07 18:06:41 +01:00
DL6ER 6d7239dbc8 Add example verification when (possibly multiple) global examples are provided below the schema level 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-03 22:08:55 +01:00
DL6ER f2d68f20d7 Also verify endpoint structure: Query endpoints from FTL and check if all properties mentioned in the docs are present (and of correct type) and that there are no extra properties we forgot to document. Furthermore, also verify that the provided examples are of correct type, too. 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-03 21:51:13 +01:00
DL6ER c7803df604 Add /api/stats/upstreams and /api/stats/database/upstreams documentation 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-02 21:19:11 +01:00
DL6ER 8df3500c83 Move /api/ftl/gateway -> /api/network/gateway, /api/ftl/interfaces -> /api/network/interfaces, /api/ftl/network -> /api/network/devices, and /api/ftl/config -> /api/config and add documentation for /api/network/devices 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-02 20:52:13 +01:00
DL6ER 69aaa71c97 Improve checkAPI.py script (add handling of {kind} URI variables) 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-02 20:41:21 +01:00
DL6ER ab5722e2a4 Accelerate checkAPI script by ensuring we parse each YAML at most once 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-02 20:16:01 +01:00
DL6ER bd5519c6bf Add API checking script 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-01-01 20:34:40 +01:00
DL6ER fcbe840804 Also allow authentication by sending SID via HEADER 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2021-02-03 09:08:23 +01:00
DL6ER 1ae67e8fbb Also use OpenAPI-enforcer to check the OpenAPI specs in addition 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2021-02-01 13:56:27 +01:00