Weighs the soul of incoming HTTP requests to stop AI crawlers

feat(apps): Make SASL login work on bookstack with Anubis (#502)

* Make SASL login work on bookstack with Anubis

* chore: spelling

Signed-off-by: Xe Iaso <me@xeiaso.net>

---------

Signed-off-by: Xe Iaso <me@xeiaso.net>
Co-authored-by: Xe Iaso <me@xeiaso.net>

authored by Dryusdan Xe Iaso and committed by GitHub 9e9982ab 3b98368a

Changed files
+24
.github
actions
spelling
data
docs
+3
.github/actions/spelling/expect.txt
··· 1 + acs 1 2 aeacus 2 3 Aibrew 3 4 alrest ··· 165 166 ruleset 166 167 RUnlock 167 168 sas 169 + sasl 168 170 Scumm 169 171 searx 170 172 sebest ··· 172 174 selfsigned 173 175 setsebool 174 176 sitemap 177 + sls 175 178 Sourceware 176 179 Spambot 177 180 sparkline
+20
data/apps/bookstack-saml.yaml
··· 1 + # Make SASL login work on bookstack with Anubis 2 + # https://www.bookstackapp.com/docs/admin/saml2-auth/ 3 + - name: allow-bookstack-sasl-login-routes 4 + action: ALLOW 5 + expression: 6 + all: 7 + - 'method == "POST"' 8 + - path.startsWith("/saml2/acs") 9 + - name: allow-bookstack-sasl-metadata-routes 10 + action: ALLOW 11 + expression: 12 + all: 13 + - 'method == "GET"' 14 + - path.startsWith("/saml2/metadata") 15 + - name: allow-bookstack-sasl-logout-routes 16 + action: ALLOW 17 + expression: 18 + all: 19 + - 'method == "GET"' 20 + - path.startsWith("/saml2/sls")
+1
docs/docs/CHANGELOG.md
··· 18 18 - Updated the nonce value in the challenge JWT cookie to be a string instead of a number 19 19 - Rename cookies in response to user feedback 20 20 - Ensure cookie renaming is consistent across configuration options 21 + - Add Bookstack app in data 21 22 - Add `--target-host` flag/envvar to allow changing the value of the Host header in requests forwarded to the target service. 22 23 - Bump AI-robots.txt to version 1.30 (add QualifiedBot) 23 24 - Add `RuntimeDirectory` to systemd unit settings so native packages can listen over unix sockets