shadow-paw / gh-html Goto Github PK

show APP_SERVER_BASE on the link

Allow user-defined redis.conf mapped into redis:/usr/local/etc/redis/redis.conf

requirepass XXXXX

ps. Server already handled redis password on connection url

Also note this on deployment guide.

only show repo with the interested branch

enable expressjs csurf

generate apidoc and push back to gh-html branch

Tried to load an 1mb html results in 404 not found

• remove session
• farewell page

• skeleton nodejs server with typescript
• tslint
• apidoc
• travis

seem multiple import cannot access to same singleton thus second load will fail due to env erased.

generate secret with make secret-reset

• take template from .env.example
• keep old settings from .env

• init config object with process.env, delete secret from env
• app access config object
• session lifetime configurable with default 1 day

• welcome
  • how to use
• auth
  • current login user info
  • logout button
• setting
  • enable / disable limit access to owned repo to prevent accessing non trusted sources

Remove the html and iframe container and use direct link approach. User shall access repo with the url in form /proxy/owner/repo/branch/path/file.html.

If login required, go for login cycle then back to that link.

optional restrict access to members in a github organization

• redis
• refuse to startup if no redis config and using multiple threads/cluster

expect to allow

• landing page
• github oauth
• repo selection
• show selected repo index.html

when access an url ending with ?xxx=abc, it will treat it as part of file and thus returned 404.

make sure outgoing request is going to github.com.

1. Verify how express handle percent-encoded URI.
2. Filter out invalid char according to RFC3986, especially @ which redirect whole request to another server and can leak access token.

• redis
• nodejs

require #10