Fossil

Timeline
Login

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

50 most recent check-ins

2025-07-25
18:47
Do not add the sync login cookie unless we know the remote supports it. It's harmless in that case but it doesn't need to be there. Rename the login cookie from the unweildy x-f-x-l (X-Fossil-Xfer-Login) to x-f-l-c (X-Fossil-Login-Card) because the former is unsightly. ... (Leaf check-in: 9789e1dc user: stephan tags: xfer-login-card)
15:08
Extend the login card mode version check to include the date and time. It is currently still set to 2.27.1, but if/when merged then the version would need to be reverted to 2.27.0 and the version/date/time check will need to be set to compare against the trunk version from immediately before the merge. This needs more testing but looks like it will resolve the "post-2.26 trunk" incompatibility. ... (check-in: 86cc923d user: stephan tags: xfer-login-card)
2025-07-24
05:26
Remove the now-obsolete parsing of the X-Fossil-Xfer-Login HTTP header. ... (check-in: 8dbcf2ac user: stephan tags: xfer-login-card)
05:10
Use a Cookie, instead of a custom HTTP header and/or URL param, to send the sync login header, as suggested in forum post 9959d2d9d9be22d2. This is simpler. ... (check-in: 756ad2f2 user: stephan tags: xfer-login-card)
03:16
Previous checkin should not have compiled - clean rebuild uncovered a stale dep. Re-map the fLoginCardMode to a bitmask so that it's possible to tell when multiple paths toggle that on, and which paths they were. ... (check-in: 780d3b2f user: stephan tags: xfer-login-card)
03:03
Doc touchups. ... (check-in: aa36afc5 user: stephan tags: xfer-login-card)
02:41
Update the change log and sync.wiki for the login card additions. ... (check-in: edfa01d9 user: stephan tags: xfer-login-card)
02:20
Doc improvements and internal API renaming for clarity. No functional changes. ... (check-in: 286110de user: stephan tags: xfer-login-card)
01:12
Remove some debug output. ... (check-in: d1b7be2f user: stephan tags: xfer-login-card)
2025-07-23
23:31
Remove some xfer login process debug output. ... (check-in: 815a84cb user: stephan tags: xfer-login-card)
20:56
Account for CGI-hosted fossil instances by sending the xfer login card as a URL argument. This is somewhat inelegant but works around their inability to read HTTP headers. This version is still more verbose than it needs to be, and requires more testing for compatibility with trunk fossil versions. ... (check-in: 439af934 user: stephan tags: xfer-login-card)
17:39
Add the x-fossil-xfer-login header check in one additional place. With the help of the included debug output, the login problem seems to be caused by CGI (only) instances not reading the inbound HTTP headers. My attempts to make it do have, so far, only triggered HTTP 500 responses. (Edit: i'd forgotten that CGIs don't get headers. The headers are necessarily consumed by the web server to find the CGI script and populate its environment.) ... (check-in: 6c900645 user: stephan tags: xfer-login-card)
16:01
Replace a call to mprintf() with fossil_strdup(). ... (Leaf check-in: 44e5125f user: danield tags: gen-uuid)
15:58
Minor optimization: replace calls to mprintf("%s", X) with fossil_strdup(X). ... (Leaf check-in: 4c3e1728 user: danield tags: trunk)
2025-07-22
22:53
Add some debugging 'message' cards to help trace how the remote is handling the login. ... (check-in: 21be2978 user: stephan tags: xfer-login-card)
18:11
Remove some dead code. Add some internal docs. Add a couple of const qualifiers to help me reason through the xfer payload buffer's lifetime. ... (check-in: 459d0cbb user: stephan tags: xfer-login-card)
17:52
Remove lots of debug output. Replace a couple of mprintf() with fossil_strdup() and a couple free() with fossil_free(). Milestone: libfossil has successfully logged in to this version of fossil. ... (check-in: 1078a123 user: stephan tags: xfer-login-card)
15:53
Doc typo fixes. ... (check-in: 2250a684 user: stephan tags: xfer-login-card)
15:51
Set g.syncInfo.bLoginCardHeader=1 if that inbound header is detected, rather than delaying it until the /xfer handling. Internal doc additions. ... (check-in: 4fc13c5c user: stephan tags: xfer-login-card)
15:41
Enable the HTTP login header if the xfer server-version is high enough, analog to the same check for the client-version. ... (check-in: bc3ad944 user: stephan tags: xfer-login-card)
15:12
Get sync working from both login card forms and add a temporary --login-card-header CLI flag to force it to emit the HTTP header form of the card in output requests. If all is well, this checkin should be able to push to the canonical repo, despite their differences. ... (check-in: 042560df user: stephan tags: xfer-login-card)
02:32
The previous checkin left me unable to push because (of course) the remote trunk doesn't know how to use the login card header. This checkin disables, via a macro toggle, the use of that header on outbound sync requests. ... (check-in: cb42278d user: stephan tags: xfer-login-card)
02:16
For testing purposes only, unconditionally use the X-Fossil-Xfer-Login HTTP header for sync requests, rather than add it to the payload (which seems to work okay). This is primarily so that apples-to-apples comparisons can be made in libfossil's testing, and will be reverted (or applied conditionally) once the libfossil side is working. ... (check-in: ff942066 user: stephan tags: xfer-login-card)
2025-07-21
23:45
Move the X-Fossil-Xfer-Login header check to the correct end of the connection. It is receiving these from libfossil tests but is failing to validate them, but that may well be a bug in that brand new downstream code. ... (check-in: b49c9b36 user: stephan tags: xfer-login-card)
19:47
Update sync.wiki for [12cc5bbf227e3]. ... (check-in: a4c5a2a9 user: stephan tags: xfer-login-card)
19:39
Do not allow more than one login card in the sync protocol. ... (check-in: 12cc5bbf user: drh tags: xfer-login-card)
18:42
Replace an mprintf() with fossil_strdup(). ... (check-in: 73a2bd06 user: stephan tags: xfer-login-card)
18:40
And this time compile before committing. ... (check-in: a62ffc19 user: stephan tags: xfer-login-card)
18:38
Enable an /xfer login card to be delivered via the X-Fossil-Xfer-Login HTTP header, which is expected to be in the same format as the sync protocol's login card. The purpose of this is to simplify generation of the login card from non-fossil(1) clients, namely libfossil. This is untested until libfossil can generate such cards (it's just missing a bit of glue for that). ... (check-in: cfddded4 user: stephan tags: xfer-login-card)
17:16
Account for [638b7e094b899a] when building with --json, as reported in forum post 9acc3d0022. ... (check-in: c6f0d7ae user: stephan tags: trunk)
13:20
Remove FossilUserPerms::Query, as it's unused and its designated capabilities letter 'q' collides with ModTkt. It's been there since 2011-09-14 but went unnoticed until today when that struct was emacs-macro-reformatted into libfossil and triggered a duplicate case value for the letter 'q'. ... (check-in: 638b7e09 user: stephan tags: trunk)
12:23
Sync with trunk. ... (Leaf check-in: e17d35e7 user: florian tags: standard-cli-colors)
12:20
Sync with trunk. ... (Leaf check-in: 931e7065 user: florian tags: diff-word-wrap)
12:16
Sync with trunk. ... (Leaf check-in: 75244ee4 user: florian tags: diff-keyboard-navigation)
12:14
Sync with trunk. ... (Leaf check-in: a2a1e4a7 user: florian tags: timeline-keyboard-navigation)
2025-07-15
20:11
Update the built-in SQLite to the latest trunk version, for testing. ... (check-in: 01855974 user: drh tags: trunk)
08:16
Move the mark->rid assignment down one block to avoid setting it if we're not going to use it for the 'b' and 'c' mark cases. ... (Leaf check-in: c2d25c42 user: stephan tags: git-parse-mark-fix)
08:13
A proposed, but also unproven, patch for the git export parse_mark() issues discussed in forum thread 906c248f2f. ... (check-in: 076c8def user: stephan tags: git-parse-mark-fix)
2025-07-14
17:31
Add mentions in changes.wiki and signing.md that SSH-signed artifacts are "ignored" by fossil versions prior to 2.26, as suggested in forum post 9348885dd6. ... (check-in: 3f8d014f user: stephan tags: trunk)
13:13
Add the -l and -x options to the test-filezip command. ... (check-in: 932d351e user: drh tags: trunk)
2025-07-13
20:57
Update the (undocumented) test-filezip command so that the ZIP archvie it creates has correct timestamps. ... (check-in: 6368fce2 user: drh tags: trunk)
2025-07-09
21:54
improve whatis output when lising checkins contain some file artifact by showing on which branch belong the checkin. (just like the /whatis webpage) ... (check-in: d3896c2a user: mgagnon tags: trunk)
14:16
Update the change log for version 2.27 ... (check-in: a403e11b user: drh tags: trunk)
13:52
Update the built-in SQLite to a version that fixes a possible UAF following OOM. ← This is me! ... (check-in: a6d506ec user: drh tags: trunk)
13:46
Do not give unnecessary clues to user anonymous (which is the login used by most attack robots) that something has gone wrong inside of Fossil. ... (check-in: c66b038c user: drh tags: trunk)
13:01
Fix the non-standard %q format specifier in Fossil's custom printf() implementation so that the precision refers to the number of input characters, not the number of output characters. ... (check-in: 09715361 user: drh tags: trunk)
2025-07-08
20:35
Update the built-in SQLite to the latest trunk version for testing. ... (check-in: d62593b7 user: drh tags: trunk)
2025-07-07
15:16
PoC for the previous check-in: use UUIDs for project-code and server-code. ... (check-in: e38c0680 user: danield tags: gen-uuid)
15:11
Add a function for generating a random (v4) UUID and a test command using it. ... (check-in: 9472f708 user: danield tags: gen-uuid)
2025-07-05
11:35
On the 'user capabilities changed' notification, correct /setup_uedit?uid=... to /setup_uedit?id=... ... (check-in: c786b190 user: stephan tags: trunk)