47a3690384
style: fix O alignment in NORA logo on dashboard
2026-01-31 12:39:31 +00:00
cf55a19acf
docs: sync CHANGELOG and OpenAPI with actual implementation
...
- Fix CHANGELOG: add missing versions v0.2.4-v0.2.12
- Implement GET /v2/_catalog endpoint for Docker repository listing
- Add missing OpenAPI endpoints:
- Docker: PUT manifest, POST/PATCH/PUT blob uploads, HEAD blob
- Maven: PUT artifact upload
- Cargo: GET metadata, GET download (was completely undocumented)
- Metrics: GET /metrics
- Update OpenAPI version to 0.2.12
2026-01-31 07:54:19 +00:00
ee4e01467a
feat: add secrets provider architecture
...
Trait-based secrets management for secure credential handling:
- SecretsProvider trait for pluggable backends
- EnvProvider as default (12-Factor App pattern)
- ProtectedString with zeroize (memory zeroed on drop)
- Redacted Debug impl prevents secret leakage in logs
- S3Credentials struct for future AWS S3 integration
- Config: [secrets] section with provider and clear_env options
Foundation for AWS Secrets Manager, Vault, K8s (v0.4.0+)
2026-01-30 10:02:58 +00:00
3265e217e7
feat: add configurable rate limiting
...
Rate limits now configurable via config.toml and ENV variables:
- New [rate_limit] config section with auth/upload/general settings
- ENV: NORA_RATE_LIMIT_{AUTH|UPLOAD|GENERAL}_{RPS|BURST}
- Rate limit configuration logged at startup
- Functions accept &RateLimitConfig instead of hardcoded values
2026-01-30 08:20:50 +00:00
29c56c6eed
docs: add CHANGELOG for v0.2.0 (EN/RU)
...
Document all new features:
- Testing infrastructure (75 tests)
- Input validation and path traversal protection
- Rate limiting
- Request ID tracking
- Migrate command
- Error handling improvements
- SVG brand icons
Includes Russian translation.
2026-01-26 00:05:44 +00:00