Commit Graph

379 Commits

Author SHA1 Message Date
M1 f17bfbfd4b fix: switch ureq from native-tls to rustls (bundled roots) 2026-03-18 13:54:39 +04:00
M1 3fa624eff8 fix: replace curl subprocess with ureq blocking client in std::thread 2026-03-18 13:40:28 +04:00
M1 6b8e1fc9d9 cleanup: remove debug warn logs from monitor runner 2026-03-18 13:30:19 +04:00
M1 6e1d642c77 fix: allow null status_code in ingest schema; check HTTP status in post_result 2026-03-18 13:28:42 +04:00
M1 5037222846 fix: add 10s timeout to post_result to prevent hung API calls 2026-03-18 13:24:52 +04:00
M1 3ce89a88bf debug: log post_result calls 2026-03-18 13:22:35 +04:00
M1 749a06b9d7 debug: log check errors and trace post_result calls 2026-03-18 13:19:35 +04:00
M1 cb8d0f81b1 debug: add warn logs to curl thread, fix temp file uniqueness 2026-03-18 13:17:11 +04:00
M1 556729b881 fix: use std::thread + tokio oneshot for curl — fully decoupled from tokio thread pool 2026-03-18 13:10:04 +04:00
M1 5e76b2212f fix: use std::process::Command+spawn_blocking+temp file to avoid all pipe/async hang issues 2026-03-18 13:08:08 +04:00
M1 289ec8e038 fix: hard task-level timeout as failsafe so in-flight lock always clears 2026-03-18 13:05:43 +04:00
M1 0edce8c555 fix: use spawn+manual read+wait instead of output() to avoid stdout pipe hang 2026-03-18 13:03:06 +04:00
M1 94200b430f fix: set kill_on_drop and explicit stdio pipes so curl doesn't inherit parent fds 2026-03-18 12:59:34 +04:00
M1 79bf7d9295 fix: wrap curl output() in tokio timeout in case process hangs on stdout 2026-03-18 12:58:12 +04:00
M1 554d95cfb4 fix: correctly handle curl non-zero exit codes as errors 2026-03-18 12:55:00 +04:00
M1 5730a3cb83 fix: replace reqwest with curl subprocess for reliable hard timeouts 2026-03-18 12:52:17 +04:00
M1 c68700da46 fix: use blocking reqwest in spawn_blocking for reliable OS-level timeout 2026-03-18 12:48:30 +04:00
M1 4035a3b215 fix: switch reqwest to native-tls so connect_timeout covers TLS handshake 2026-03-18 12:45:52 +04:00
M1 5b0bce65c6 fix: pre-flight TCP connect check with hard tokio timeout before reqwest attempt 2026-03-18 12:43:27 +04:00
M1 b8b0a9d5e2 fix: per-check client with connect_timeout to guarantee OS-level TCP timeout 2026-03-18 12:42:09 +04:00
M1 7905a8003b fix: clean up cert check - only runs after successful response, no more borrow errors 2026-03-18 12:40:03 +04:00
M1 de6e24e973 fix: move cert check to after successful HTTP response, never runs on down/timeout hosts 2026-03-18 12:39:18 +04:00
M1 d49cfa70f5 fix: add connect_timeout to reqwest client to prevent indefinite TCP SYN hangs 2026-03-18 12:37:09 +04:00
M1 68093131fa fix: spawn cert check as independent task, never blocks main request timeout 2026-03-18 12:35:58 +04:00
M1 dbbc9c00cc fix: run cert check concurrently with request so a hanging TCP connect can't block the timeout 2026-03-18 12:33:22 +04:00
M1 b41faff2ad fix: move timeout definition before cert check 2026-03-18 12:27:00 +04:00
M1 81ac8f0c20 fix: apply timeout to cert check — was hanging indefinitely before request even started 2026-03-18 12:26:27 +04:00
M1 05c60db605 fix: wrap full request+body read in timeout to catch slow response bodies 2026-03-18 12:17:55 +04:00
M1 baea9f8e7e fix: sub-key notice as separate card below account section 2026-03-18 12:05:24 +04:00
M1 6d057d5797 fix: move sub-key notice inside account section 2026-03-18 12:04:40 +04:00
M1 988c43090b fix: make sub-key notice match page style 2026-03-18 12:03:02 +04:00
M1 a9a1e43146 feat: add sub-key notice banner on settings page 2026-03-18 12:01:35 +04:00
M1 f7d6eff972 fix: block sub-keys from accessing/modifying email, account key, and other sub-keys 2026-03-18 11:51:52 +04:00
M1 eeb0318c4d fix: hide login key and sub-keys from sub-key sessions 2026-03-18 11:48:51 +04:00
M1 c56af82053 fix: increase key input maxlength to 64 for new key format 2026-03-18 11:45:31 +04:00
M1 1a7bc4dfa5 fix: sameSite=none for cross-origin cookie (pingql.com → api.pingql.com) 2026-03-18 11:41:00 +04:00
nate 5a0cf5033b fix: harden auth, SSRF, query engine, and cookie security 2026-03-18 11:37:33 +04:00
M1 d278ab0458 fix: use credentials:include for cross-origin API requests 2026-03-18 09:44:50 +04:00
M1 641af86779 fix: separate jsHash for app.js cache busting 2026-03-18 09:43:11 +04:00
M1 fa8ff8b361 fix: explicit OPTIONS handler for CORS preflight 2026-03-18 09:41:25 +04:00
M1 7a9417297f fix: add preflight CORS options for api.pingql.com 2026-03-18 09:41:09 +04:00
M1 9fb90d9ea8 fix: point dashboard API calls to api.pingql.com 2026-03-18 09:39:07 +04:00
M1 841a852491 feat: split web and api into separate apps 2026-03-18 09:33:46 +04:00
M1 ba437e3c5a feat: block web UI routes on api.pingql.com, serve JSON root 2026-03-18 09:30:13 +04:00
M1 3a9cd62cdd fix: increase tos top padding to pt-28 2026-03-18 09:26:18 +04:00
M1 1325512c6d fix: reduce tos page padding and section spacing 2026-03-18 04:04:47 +04:00
M1 7a6a1fdd10 build: rebuild css with pt-40 and pt-2 for tos page 2026-03-18 04:02:47 +04:00
M1 143868eb21 fix: increase TOS top padding, add spacing above h2s 2026-03-18 03:59:52 +04:00
M1 7db2889960 feat: add Terms of Service page 2026-03-18 03:52:58 +04:00
M1 705073b508 fix: center hero section vertically on pageload 2026-03-18 03:45:14 +04:00