pi-hole/FTL
1
0
Fork 0
mirror of https://github.com/pi-hole/FTL.git synced 2024-10-26 16:52:18 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity
5,549 Commits 20 Branches 106 Tags
bc72fe67724c32e5cf1639d4f9db68ecd9dbb130
Commit Graph
196 Commits
Author SHA1 Message Date
DL6ER bc72fe6772 Merge branch 'development-v6' into tweak/domain_array 2023-10-13 20:12:03 +02:00
DL6ER 80d4a0efec Merge pull request #1653 from pi-hole/tweak/api_auth_https 
Add /api/info/login
 2023-10-10 20:36:04 +02:00
DL6ER 231f8f876e Fix endpoint security requirements for /info/login, /auth/totp, /info/client 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-10 19:21:14 +02:00
DL6ER b60e8bdc2f Add /api/info/login and remove some parts from /api/auth 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-08 22:55:24 +02:00
DL6ER cd16053c08 Include processed object only in POST and PUT responses 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-08 22:38:39 +02:00
DL6ER 970695b65f Adjust tests to include the new https_port property 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-08 19:57:35 +02:00
DL6ER c01567aa4f Merge branch 'development-v6' into tweak/redirections 2023-10-08 09:11:32 +02:00
DL6ER 23c082b401 Merge branch 'development-v6' into tweak/domain_array 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-08 09:11:32 +02:00
DL6ER ac056f07eb Merge branch 'development-v6' into tweak/api_auth_https 2023-10-08 09:11:32 +02:00
DL6ER 678d014a26 Merge branch 'development-v6' into tweak/search_abp 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-08 09:11:32 +02:00
DL6ER 7e5357cbe3 Add lists_processed to all corresponding OpenAPI elements 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-08 09:11:32 +02:00
DL6ER c4237f1846 Include HTTPS port (if any) in /api/auth response 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-08 09:11:32 +02:00
DL6ER 97cfa69557 Remove unnecessary redirection from **/$ -> **$ 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-08 09:11:32 +02:00
DL6ER 425f791a19 Also return a list of items that have been successfully added 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-08 09:00:49 +02:00
DL6ER 97cc85553f Send processed object after list insertion to inform the client how many items have been successfully added, how many have failed and, if, what the individual errors were 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-08 08:31:58 +02:00
DL6ER db1fa3a106 Searchterm should simply be called domain 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-07 21:52:42 +02:00
DL6ER 88e7b1e5dc Add ABP-support for /api/search and add new optional debug parameter 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-07 21:52:39 +02:00
DL6ER 2141db3d64 Add rate-limiting on password login attempts 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-10-07 19:59:32 +02:00
DL6ER 5e9327783e Merge branch 'development-v6' into tweak/domain_array 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-09-29 22:30:57 +02:00
DL6ER f8b8e63044 Add antigravity (subscribed allowlists with wildcard support) 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-09-15 21:39:04 +02:00
DL6ER 1161463a60 Fix spellcheck error 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-09-15 17:35:29 +02:00
DL6ER 2c516d1d8c Add ability to specify domains, lists, clients and group names as arrays for creating multiple with the same properties (comment, groups, ...) at the same time 
Signed-off-by: Dominik Derigs <dl6er@dl6er.de>
 2023-09-15 17:35:29 +02:00
DL6ER 392db953b3 Merge pull request #1607 from pi-hole/tweak/query_details 
Provide regex ID for API
 2023-09-15 17:25:17 +02:00
DL6ER 9704455591 Always set regex_id when available 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-09-13 16:44:40 +02:00
DL6ER 2788fa0137 Add files.pcap to expose integrated packet (PCAP) dumping to a file 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-09-02 18:25:34 +02:00
Christian König 22954823b5 Hard limit for searching the adlists is 10,000 
Signed-off-by: Christian König <ckoenig@posteo.de>
 2023-08-09 22:13:34 +02:00
DL6ER 52c08c42b9 Embed missing file API specs file specs/action.yaml 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-08-02 18:17:38 +02:00
Christian König da544dcbb2 Change default webport to 80 
Signed-off-by: Christian König <ckoenig@posteo.de>
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-08-01 15:54:20 +02:00
DL6ER a9d47713e4 Provide regex ID for API 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-07-30 21:49:23 +02:00
DL6ER e085728e3e Merge pull request #1601 from pi-hole/fix/redirect_slash 
Slash the slash
 2023-07-28 23:07:30 +02:00
DL6ER 55785f1b0c Simplify code and handle case of missing trailing slashes for index pages properly 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-07-28 22:36:41 +02:00
DL6ER 723db23703 Use explicitly sized integers (u/int64_t) to ensure consistent operation on both 32 and 64 bit architectures 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-07-27 04:10:23 +02:00
DL6ER e772442ea7 Use header SID authentication instead of the implicit cookie authentication to circumvent CORS issues 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-07-18 22:01:58 +02:00
DL6ER 756a688f05 Fix OpenAPI documentation login 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-07-18 22:00:06 +02:00
DL6ER de3e9bf0a5 Fix logo path to use the embedded SVG icon 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-07-13 20:03:31 +02:00
DL6ER ea40474635 Add OpenAPI Authentication and Authorization details for the API. Every endpoint except GET,POST /api/auth needs authentication 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-07-13 20:00:11 +02:00
DL6ER 73f9ad02a0 Allow defining lines to inject into the generated dnsmasq configuration (misc.dnsmasq_lines) 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-06-15 17:53:21 +02:00
DL6ER 07f1f7df44 Save number of ABP-style entries in adlist table's new column abp_entries 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-06-15 09:38:37 +02:00
DL6ER a7f47a5e1f The number of entries on a list should be the sum of domains and ABP-style entries 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-06-12 21:44:24 +02:00
DL6ER 813509841b Accept cookie authentication only when CSRF header is provided (and correct) 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-06-04 19:29:54 +02:00
DL6ER 6975a17c7c Allow fractional delay for blocking mode changes and fix a few smaller memory leaks 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-06-03 13:26:58 +02:00
DL6ER 7ad68b785b Fix favicon for API documentation (in the same way we did for the web interface a few minutes ago) 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-06-03 12:50:15 +02:00
Christian König 62cfc25b95 Fix spelling in v6 
Signed-off-by: Christian König <ckoenig@posteo.de>
 2023-05-30 22:42:13 +02:00
DL6ER 19c72d354e !!! BREAKING CHANGE !!! Switch to the proven memory-hard password-hashing alogorithm BALLOON. The stored password hash will be upgraded on the first successdful login. To wave the necessity to implement BALLOON with every client trying to access the API, we remove the existing challenge-response authentication in favor of allowing login straight with the password. This has been avoided in the past, however, seems now acceptable that FTL (even by default) offers secure end-to-end encryption over HTTPS. 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-05-30 21:22:45 +02:00
DL6ER d42d4be97b Add webserver.tls.rev_server boolean useful to tell FTL that unencrypted connections are still secure (in the context of Pi-hole solely being reachable through a reverse proxy) 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-05-28 14:45:03 +02:00
DL6ER d86a2f1c95 Add pihole.webhome() and add settings + group pages deep URI rewrite 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-05-26 21:50:26 +02:00
DL6ER 54cf9ad1f9 Add new debug.tls option logging any mbedTLS debug output to webserver.log 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-05-25 18:28:34 +02:00
DL6ER 0aecb57375 Add to /api/info/ftl if FTL is allowed to perform destructive operations (such as poweroff or reboot) 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-05-24 20:59:23 +02:00
DL6ER c672120123 Add a setting to block possibly harmful actions 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-05-24 20:49:27 +02:00
DL6ER b5a6ae44aa Add /api/action/flush/arp flushing both the network and network_addresses tables in pihole-FTL.db 
Signed-off-by: DL6ER <dl6er@dl6er.de>
 2023-05-24 20:47:51 +02:00