m724/anonsubmit
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Also update README

Browse source
This commit is contained in:
Minecon724 2025-04-03 09:09:30 +02:00
commit 8dbdec6d32
Signed by untrusted user who does not match committer: m724
GPG key ID: A02E6E67AB961189
1 changed files with 4 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

17
README.md
View file

@ -34,6 +34,10 @@ AnonChat can be configured using environment variables:
- `RATELIMIT_STORAGE_URL`: Storage backend for rate limiting (defaults to memory storage) - `RATELIMIT_STORAGE_URL`: Storage backend for rate limiting (defaults to memory storage)
- `REDIS_URL`: Redis connection URL for session storage (defaults to "redis://localhost:6379/0") - `REDIS_URL`: Redis connection URL for session storage (defaults to "redis://localhost:6379/0")
- `AUTO_DELETE_HOURS`: Number of hours after which closed inquiries are automatically deleted (defaults to 48) - `AUTO_DELETE_HOURS`: Number of hours after which closed inquiries are automatically deleted (defaults to 48)
- `AUTH0_CLIENT_ID`: Auth0 client ID for authentication
- `AUTH0_CLIENT_SECRET`: Auth0 client secret for authentication
- `AUTH0_DOMAIN`: Auth0 domain for authentication
- `SESSION_TYPE`: Session storage type (defaults to "filesystem")
You can set these variables in a `.env` file: You can set these variables in a `.env` file:
@ -179,19 +183,6 @@ When enabled, the application will update the admin user's password to match the
## TODO: Security Improvements ## TODO: Security Improvements
The following security enhancements are planned for future releases: The following security enhancements are planned for future releases:
- [ ] Implement CAPTCHA protection for admin login
- Add CAPTCHA verification to prevent brute force attacks
- Support multiple CAPTCHA providers (reCAPTCHA, hCaptcha)
- Implement rate limiting for failed login attempts
- Add IP-based blocking after multiple failed attempts
### Authentication Methods
- [ ] Add OAuth 2.0 support for admin authentication
- Integrate with common providers (Google, GitHub, Microsoft)
- Implement proper PKCE flow for added security
- Support for custom OAuth providers for enterprise deployments
- Add multi-factor authentication options
### Read-Only Links ### Read-Only Links
- [ ] Implement read-only sharing links for inquiries - [ ] Implement read-only sharing links for inquiries