webmentions-ssg - A web service that implements webmentions receiver/sender for static site generators.

	Commit message (Collapse)	Author
2026-08-20	docs(core): add docstrings and type annotations	Dennis Fink
	Document forms, validators, models, and views with PEP 287-style docstrings and complete missing type annotations. Add developer-readable representations for Webmention models and mark the user password property as write-only in its return type.
2026-08-20	chore(core): standardize SPDX copyright headers	Dennis Fink
	Add SPDX copyright and license headers to source, test, migration, template, and static files throughout the project. Include the maintainer email in copyright notices and fill in the BSD license copyright holder.
2026-08-19	refactor(core): improve typing and test coverage	Dennis Fink
	Restructure database and user CLI commands, make passwords write-only model properties, and use the UTC datetime constant throughout the application. Add PEP 287-style documentation and expand receiver, scanner, sender, and URL security tests to cover error paths and edge cases.
2026-08-17	feat(sender): add manual source rescan action	Dennis Fink
	Add an authenticated action to queue a source rescan from the sent Webmentions overview. Extract the reusable confirmation modal and its JavaScript so received and sent admin actions share the same implementation.
2026-08-16	feat(sender): improve sent webmention status display	Dennis Fink
	Highlight source and Webmention rows based on their current state and use badges for clearer status and activity indicators. Make discovered endpoints and status URLs clickable in the detail view.
2026-08-16	refactor(core): remove user credential length limits	Dennis Fink
	Store usernames and password hashes as text instead of fixed-length strings so their maximum length is not constrained by the database schema. Require every user to have a password hash.
2026-08-15	feat(sender): add outgoing Webmention pipeline	Dennis Fink
	Scan generated h-entry documents for Webmention targets and track source revisions and delivery state in the database. Discover target endpoints, send Webmentions asynchronously, and reconcile updated, removed, restored, and deleted sources across scans. Add authenticated views for inspecting sent Webmentions and make the scanner schedule configurable.
2026-08-10	feat(core): add received webmention admin actions	Dennis Fink
	Add authenticated delete and reverify actions to the received webmentions admin view and protect them with CSRF validation. Enable CSRF protection globally while exempting the public Webmention endpoint.
2026-08-10	fix(receiver): prevent requests to non-public addresses	Dennis Fink
	Resolve source hostnames before fetching and reject addresses that are not globally routable to prevent SSRF against local or private services. Repeat the check for every HTTP request so redirects cannot bypass the initial source validation. Treat DNS resolution failures during verification as temporary fetch errors.
2026-08-09	Implement received Webmention handling	Dennis Fink
	Add the Flask application setup, database models and migrations, authentication, and configuration for development and testing. Implement asynchronous Webmention verification with Huey, including HTML and plain-text source validation, retries, status tracking, and size limits. Add status, login, and paginated received-Webmention views together with comprehensive tests for forms, views, and receiver tasks.
2026-08-09	Implement received Webmention handling	Dennis Fink
	Add the Flask application setup, database models and migrations, authentication, and configuration for development and testing. Implement asynchronous Webmention verification with Huey, including HTML and plain-text source validation, retries, status tracking, and size limits. Add status, login, and paginated received-Webmention views together with comprehensive tests for forms, views, and receiver tasks.