nuke/lib
Xe Iaso 24e3746b0b
fix(lib): fix challenge issuance logic (#881)
* fix(lib): fix challenge issuance logic

Fixes #869

v1.21.0 changed the core challenge flow to maintain information about
challenges on the server side instead of only doing them via stateless
idempotent generation functions and relying on details to not change.
There was a subtle bug introduced in this change: if a client has an
unknown challenge ID set in its test cookie, Anubis will clear that
cookie and then throw an HTTP 500 error.

This has been fixed by making Anubis throw a new challenge page instead.

Signed-off-by: Xe Iaso <me@xeiaso.net>

* test(lib): you win this time spell check

Signed-off-by: Xe Iaso <me@xeiaso.net>

---------

Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-07-21 18:53:59 -04:00
..
challenge feat(lib): use new challenge creation flow (#749) 2025-07-04 20:42:28 +00:00
localization Update pt-BR.json (#878) 2025-07-21 22:21:47 +00:00
policy feat(expressions): add missingHeader function to bot environment (#870) 2025-07-20 19:09:29 -04:00
store fix broken bbolt database cleanup process (#848) (#848) 2025-07-18 13:51:32 -04:00
testdata fix(config): actually load threshold config (#696) 2025-06-19 17:13:01 -04:00
anubis.go fix(lib): fix challenge issuance logic (#881) 2025-07-21 18:53:59 -04:00
anubis_test.go fix(lib): fix challenge issuance logic (#881) 2025-07-21 18:53:59 -04:00
config.go fix: make ogtags and dnsbl use the Store instead of memory (#760) 2025-07-05 16:17:46 -04:00
config_test.go fix(config): actually load threshold config (#696) 2025-06-19 17:13:01 -04:00
http.go fix: race conditions, cookie logic, and the try again button (#833) 2025-07-15 00:54:08 +00:00
http_test.go fix: Dynamic cookie domain not working (#731) 2025-06-29 15:38:55 -04:00