Skip to content

v0.1.0

Choose a tag to compare

View all tags
@coko7 coko7 released this 03 Jul 12:50
v0.1.0
e260477

Initial release. Web GUI frontend for rustypaste, adding SSO, per-group access control, and optional client-side encryption on top of rustypaste's bearer-token-only API.

Features

  • 🔐 OpenID Connect SSO — login flow (PKCE + state/nonce), silent token refresh, tested against Zitadel and other multi-audience OIDC providers.
  • 🗂️ Per-group token mapping — token-bindings.yaml maps OIDC groups to rustypaste tokens/permissions; first matching rule wins. Admin status derived from the delete permission.
  • 🔒 Client-side encryption — optional password-based AES-GCM (WebCrypto) encryption; plaintext/password never reach the server.
  • 📋 Dashboard, upload, paste, and shorten-URL pages (HTMX + Askama).
  • 🗑️ Paste management: paginated listing, delete via /api/pastes/{id}.
  • 🛡️ Admin token-bindings viewer.
  • 🌐 Public, SSRF-guarded decrypt endpoint for sharing encrypted links.
  • ⚙️ CSRF protection, static CSP headers, and rate limiting on all mutating routes.
  • 🗄️ SQLite-backed sessions and upload log, migrations run automatically at startup.
  • 🐳 Docker Compose deployment path.

Full Changelog: https://github.com/coko7/kyosabi/commits/v0.1.0

Assets 2
Loading