Commit Graph

190 Commits

Author SHA1 Message Date
dependabot[bot] 15e3619479
chore(deps): bump tokio from 1.36.0 to 1.37.0 (#268)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Orhun Parmaksız <orhunparmaksiz@gmail.com>
2024-04-04 00:09:29 +03:00
Orhun Parmaksız 44c07a3eb6
chore(release): prepare for v0.15.0 2024-03-27 23:03:10 +03:00
Orhun Parmaksız 64d783bd0d
chore(deps): bump all dependencies 2024-03-27 22:49:10 +03:00
Orhun Parmaksız 54e2ddc91a
chore(deps): bump serde from 1.0.196 to 1.0.197 2024-03-27 17:35:12 +03:00
dependabot[bot] 8e505c0da8
chore(deps): bump regex from 1.10.3 to 1.10.4 (#267)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-27 17:34:04 +03:00
Orhun Parmaksız 0f0ba72305
chore(deps): bump shuttle dependencies 2024-03-27 17:33:23 +03:00
dependabot[bot] 77e97573ef
chore(deps): bump tokio from 1.35.1 to 1.36.0 (#242)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-27 17:27:22 +03:00
dependabot[bot] 40f5d909ca
chore(deps): bump config from 0.13.4 to 0.14.0 (#240)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-27 17:27:07 +03:00
dependabot[bot] 567480a21e
chore(deps): bump actix-files from 0.6.2 to 0.6.5 (#225)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-27 17:25:43 +03:00
dependabot[bot] e8c342af46
chore(deps): bump ring from 0.17.7 to 0.17.8 (#248)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-27 17:25:13 +03:00
dependabot[bot] 1442771a57
chore(deps): bump awc from 3.3.0 to 3.4.0 (#243)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-27 17:24:56 +03:00
Jake Howard dae00c42b5
feat(server): do path joins more safely (#247)
* Do path joins more safely

* Improve path cleaning and tests

* Lower-case error message

Co-authored-by: Orhun Parmaksız <orhunparmaksiz@gmail.com>

* Correct handle potential errors in `get_path`

* Use `expect` in tests, rather than `unwrap`

* Correctly handle invalid upload path without panic

* Correctly handle filesystem create errors

* Use result rather than option to allow easier error handling

---------

Co-authored-by: Orhun Parmaksız <orhunparmaksiz@gmail.com>
2024-03-06 05:55:59 +01:00
dependabot[bot] 8de2450931
chore(deps): bump serde from 1.0.195 to 1.0.196 (#232)
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.195 to 1.0.196.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.195...v1.0.196)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-29 15:04:10 +01:00
dependabot[bot] 4703b26194
chore(deps): bump byte-unit from 5.1.3 to 5.1.4 (#229)
Bumps [byte-unit](https://github.com/magiclen/byte-unit) from 5.1.3 to 5.1.4.
- [Commits](https://github.com/magiclen/byte-unit/compare/v5.1.3...v5.1.4)

---
updated-dependencies:
- dependency-name: byte-unit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-24 13:48:07 +01:00
dependabot[bot] e383b6f426
chore(deps): bump regex from 1.10.2 to 1.10.3 (#227)
Bumps [regex](https://github.com/rust-lang/regex) from 1.10.2 to 1.10.3.
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/compare/1.10.2...1.10.3)

---
updated-dependencies:
- dependency-name: regex
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-22 16:11:30 +01:00
dependabot[bot] 90c0477edb
chore(deps): bump serde from 1.0.194 to 1.0.195 (#221)
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.194 to 1.0.195.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.194...v1.0.195)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-08 12:35:54 +01:00
dependabot[bot] 7f8428c75d
chore(deps): bump byte-unit from 5.1.2 to 5.1.3 (#220)
Bumps [byte-unit](https://github.com/magiclen/byte-unit) from 5.1.2 to 5.1.3.
- [Commits](https://github.com/magiclen/byte-unit/compare/v5.1.2...v5.1.3)

---
updated-dependencies:
- dependency-name: byte-unit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-08 12:35:35 +01:00
dependabot[bot] 25a013266c
chore(deps): bump serde from 1.0.193 to 1.0.194 (#219)
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.193 to 1.0.194.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.193...v1.0.194)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-02 12:41:04 +01:00
dependabot[bot] c9ba166865
chore(deps): bump awc from 3.2.0 to 3.3.0 (#215)
Bumps [awc](https://github.com/actix/actix-web) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actix/actix-web/releases)
- [Changelog](https://github.com/actix/actix-web/blob/master/CHANGES.md)
- [Commits](https://github.com/actix/actix-web/compare/awc-v3.2.0...awc-v3.3.0)

---
updated-dependencies:
- dependency-name: awc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-25 15:23:17 +01:00
dependabot[bot] 4af7970f48
chore(deps): bump futures-util from 0.3.29 to 0.3.30 (#214)
Bumps [futures-util](https://github.com/rust-lang/futures-rs) from 0.3.29 to 0.3.30.
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/futures-rs/compare/0.3.29...0.3.30)

---
updated-dependencies:
- dependency-name: futures-util
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-25 15:18:58 +01:00
dependabot[bot] 87a0ba21ed
chore(deps): bump actix-web from 4.4.0 to 4.4.1 (#213)
Bumps [actix-web](https://github.com/actix/actix-web) from 4.4.0 to 4.4.1.
- [Release notes](https://github.com/actix/actix-web/releases)
- [Changelog](https://github.com/actix/actix-web/blob/master/CHANGES.md)
- [Commits](https://github.com/actix/actix-web/compare/web-v4.4.0...web-v4.4.1)

---
updated-dependencies:
- dependency-name: actix-web
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-25 15:18:34 +01:00
Orhun Parmaksız c8dd41549d
chore(release): prepare for v0.14.4 2023-12-20 22:52:27 +03:00
dependabot[bot] f905648866
chore(deps): bump tokio from 1.35.0 to 1.35.1 (#208)
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.35.0 to 1.35.1.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.35.0...tokio-1.35.1)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-20 12:57:53 +01:00
dependabot[bot] cf21df8a7c
chore(deps): bump byte-unit from 5.0.4 to 5.1.2 (#207)
Bumps [byte-unit](https://github.com/magiclen/byte-unit) from 5.0.4 to 5.1.2.
- [Commits](https://github.com/magiclen/byte-unit/compare/v5.0.4...v5.1.2)

---
updated-dependencies:
- dependency-name: byte-unit
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-18 13:46:56 +01:00
dependabot[bot] a806af9a41
chore(deps): bump byte-unit from 5.0.3 to 5.0.4 (#206)
Bumps [byte-unit](https://github.com/magiclen/byte-unit) from 5.0.3 to 5.0.4.
- [Commits](https://github.com/magiclen/byte-unit/compare/v5.0.3...v5.0.4)

---
updated-dependencies:
- dependency-name: byte-unit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-15 15:35:55 +01:00
Orhun Parmaksız f3962485df
chore(deps): bump shuttle dependencies 2023-12-13 20:40:50 +03:00
Orhun Parmaksız e34f747761
chore(release): prepare for v0.14.3 2023-12-12 21:30:08 +03:00
Artem Medvedev e21f99ac4a
refactor(server)!: cleanup authorization boilerplate (#199)
* refactor!: use `actix-web-grants` to protect endpoints

* fix: filter out blank strings

* doc: add documentation for a function

* fix: don't return body for not exposed endpoints

* test: add fixtures

* test: fix naming

* test: remove extra step in teardown
2023-12-12 19:21:29 +01:00
dependabot[bot] d7c67e0350
chore(deps): bump tokio from 1.34.0 to 1.35.0 (#203)
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.34.0 to 1.35.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.34.0...tokio-1.35.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 13:46:46 +01:00
Orhun Parmaksız 3e34206884
chore(deps): bump shuttle dependencies to 0.35.0 2023-12-09 22:41:20 +03:00
dependabot[bot] 1e9a3b4a71
chore(deps): bump ring from 0.17.6 to 0.17.7 (#196)
Bumps [ring](https://github.com/briansmith/ring) from 0.17.6 to 0.17.7.
- [Commits](https://github.com/briansmith/ring/commits)

---
updated-dependencies:
- dependency-name: ring
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-06 19:07:16 +01:00
Orhun Parmaksız 0f377fc44c
chore(release): prepare for v0.14.2 2023-12-05 15:21:06 +03:00
dependabot[bot] a291307bec
chore(deps): bump byte-unit from 4.0.19 to 5.0.3 (#192)
* chore(deps): bump byte-unit from 4.0.19 to 5.0.3

Bumps [byte-unit](https://github.com/magiclen/byte-unit) from 4.0.19 to 5.0.3.
- [Commits](https://github.com/magiclen/byte-unit/compare/v4.0.19...v5.0.3)

---
updated-dependencies:
- dependency-name: byte-unit
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): update codebase accordingly to the new version of byte-unit

* fix(fixtures): use more precise byte comparison

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Orhun Parmaksız <orhunparmaksiz@gmail.com>
2023-12-05 13:08:22 +01:00
Orhun Parmaksız fd75750a43
chore(deps): bump shuttle dependencies to 0.34.1 2023-11-30 00:47:36 +03:00
dependabot[bot] 7c9f443943
chore(deps): bump ring from 0.17.5 to 0.17.6 (#195)
Bumps [ring](https://github.com/briansmith/ring) from 0.17.5 to 0.17.6.
- [Commits](https://github.com/briansmith/ring/commits)

---
updated-dependencies:
- dependency-name: ring
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-29 22:36:59 +01:00
dependabot[bot] 50fad6e333
chore(deps): bump lazy-regex from 3.0.2 to 3.1.0 (#182)
Bumps [lazy-regex](https://github.com/Canop/lazy-regex) from 3.0.2 to 3.1.0.
- [Changelog](https://github.com/Canop/lazy-regex/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Canop/lazy-regex/commits)

---
updated-dependencies:
- dependency-name: lazy-regex
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-24 23:05:34 +01:00
dependabot[bot] cc6815d783
chore(deps): bump config from 0.13.3 to 0.13.4 (#188)
Bumps [config](https://github.com/mehcode/config-rs) from 0.13.3 to 0.13.4.
- [Changelog](https://github.com/mehcode/config-rs/blob/v0.13.4/CHANGELOG.md)
- [Commits](https://github.com/mehcode/config-rs/compare/0.13.3...v0.13.4)

---
updated-dependencies:
- dependency-name: config
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-24 23:05:17 +01:00
Orhun Parmaksız 92a4360752
chore(deps): bump shuttle dependencies to 0.34.0 2023-11-25 01:03:37 +03:00
dependabot[bot] 89459e6be7
chore(deps): bump url from 2.4.1 to 2.5.0 (#189)
Bumps [url](https://github.com/servo/rust-url) from 2.4.1 to 2.5.0.
- [Release notes](https://github.com/servo/rust-url/releases)
- [Commits](https://github.com/servo/rust-url/compare/v2.4.1...v2.5.0)

---
updated-dependencies:
- dependency-name: url
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-23 19:38:17 +01:00
dependabot[bot] 616e5846cc
chore(deps): bump serde from 1.0.192 to 1.0.193 (#187)
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.192 to 1.0.193.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.192...v1.0.193)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-21 23:11:01 +01:00
Orhun Parmaksız 54a906ddf7
chore(deps): bump shuttle dependencies to 0.33.0 2023-11-18 13:02:01 +01:00
dependabot[bot] 4bd3082566
chore(deps): bump tokio from 1.33.0 to 1.34.0 (#181)
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.33.0 to 1.34.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.33.0...tokio-1.34.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-15 18:20:18 +01:00
dependabot[bot] 0e7aafaf0f
chore(deps): bump tracing-subscriber from 0.3.17 to 0.3.18 (#184)
Bumps [tracing-subscriber](https://github.com/tokio-rs/tracing) from 0.3.17 to 0.3.18.
- [Release notes](https://github.com/tokio-rs/tracing/releases)
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.17...tracing-subscriber-0.3.18)

---
updated-dependencies:
- dependency-name: tracing-subscriber
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-14 15:00:22 +01:00
Orhun Parmaksız b0c61cdb09
bump shuttle dependencies to 0.32.0 2023-11-09 15:35:13 +03:00
dependabot[bot] 12b1c713a6
chore(deps): bump serde from 1.0.190 to 1.0.192 (#178)
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.190 to 1.0.192.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.190...v1.0.192)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-07 22:24:14 +01:00
Orhun Parmaksız 79662d64ab
chore(release): prepare for v0.14.1 2023-11-03 00:05:00 +01:00
Orhun Parmaksız 25be13d9bf
bump shuttle dependencies to 0.31.0 2023-11-02 16:10:51 +01:00
dependabot[bot] d943ad5bc6
chore(deps): bump futures-util from 0.3.28 to 0.3.29 (#174)
Bumps [futures-util](https://github.com/rust-lang/futures-rs) from 0.3.28 to 0.3.29.
- [Release notes](https://github.com/rust-lang/futures-rs/releases)
- [Changelog](https://github.com/rust-lang/futures-rs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/futures-rs/compare/0.3.28...0.3.29)

---
updated-dependencies:
- dependency-name: futures-util
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-27 15:19:41 +02:00
dependabot[bot] f0e0b247eb
chore(deps): bump serde from 1.0.189 to 1.0.190 (#173)
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.189 to 1.0.190.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.189...v1.0.190)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-26 14:18:07 +02:00
Orhun Parmaksız 30400cab0d
chore(deps): bump shuttle dependencies to 0.30.1 2023-10-25 16:36:42 +02:00