“Naeel”
dbb1aea936
v0.1.35: resolveProtocol — query-mode клиенты парсят JSON-ответы (эмпирика), ошибки AWS-JSON __type
2026-08-14 15:56:40 +04:00
“Naeel”
ec10acc99e
v0.1.35: query-mode XML-ответы, TOCTOU receive, валидации AWS, purge 60s, сужение локов
2026-08-14 15:53:08 +04:00
“Naeel”
94108eec48
v0.1.32: главная — пошаговый старт; примеры команд — на /examples крупным шрифтом; консоль сразу в аккаунт
2026-08-14 13:45:06 +04:00
“Naeel”
afa9a1a7e4
v0.1.31: админский UI /admin, юзерский UI без слова «тенант»
2026-08-14 10:19:35 +04:00
“Naeel”
af656fe8f5
v0.1.27: страница-описание сервиса на корне / (дизайн Nubes) + /static
2026-08-14 09:05:16 +04:00
“Naeel”
3a105de05b
v0.1.26: версия в /health, admin health и UI; ldflags VERSION; Makefile build фикс
2026-08-14 08:19:14 +04:00
“Naeel”
15ec1a9ee4
chore: удалить устаревшие тестовые файлы (SNS-легаси, несуществующие импорты)
2026-08-13 22:06:26 +04:00
Naeel
a4c910a099
feat(metrics): integrate Prometheus metrics into router and main
...
- /metrics endpoint via promhttp.Handler
- actionHandler: request counter, bytes counter, latency histogram, errors
- Gauge updater: queues/messages count per tenant every 15s
- All metrics labeled by tenant and/or operation
2026-04-12 12:04:54 +03:00
Naeel
aade320400
feat(billing): add queue_name column to usage records
2026-04-12 11:56:53 +03:00
Naeel
1272388673
feat: billing — usage tracking per SQS operation in PostgreSQL
...
- New package app/billing: Init/RecordUsage/Close with auto-migrate
- Integration in actionHandler: record tenant_id, operation, msg_count, msg_bytes
- Helm chart: billing section in values.yaml, secret-billing.yaml, env vars in deployment
- Optional: billing disabled by default (BILLING_PG_HOST not set = no-op)
- Table: sqs_usage_records with index on (tenant_id, recorded_at)
2026-04-12 11:51:27 +03:00
Naeel
38194fb2fa
feat: v0.1.18 — TagQueue/UntagQueue/ListQueueTags/ChangeMessageVisibilityBatch, JWT auth in UI API tests, hardcore_test JWT fix, Helm chart v0.1.18
2026-04-11 09:44:38 +03:00
Naeel
fbecde72eb
feat: add 4 missing SQS API commands for Yandex/AWS compatibility
...
- ChangeMessageVisibilityBatch: batch visibility timeout (up to 10 msgs)
- TagQueue: add/update queue tags
- UntagQueue: remove queue tags by keys
- ListQueueTags: list all queue tags
- Added Tags field to Queue struct
- Request/Response models for all 4 commands
- Registered in router (17 total API commands now)
- Yandex Message Queue API reference doc
2026-04-11 07:51:17 +03:00
Naeel
3b4fe0bb3a
security: address medium risks in jwt, redis ordering and body limit
2026-04-10 19:44:34 +03:00
Naeel
a5e9bfb15c
security: fix critical/high auth, idor, races and persistence
2026-04-10 19:41:59 +03:00
Naeel
e9a26f7975
v0.1.17: security hardening — 18/20 vulnerabilities fixed
...
Phase 1 (Critical):
- #1 JWT auth (done in v0.1.16)
- #2 Batch message size validation in send_message_batch.go
- #10 RLock in GetQueueUrlV1 (data race fix)
Phase 2 (AWS-compatible limits):
- #3 QueueName validation: max 80 chars, [a-zA-Z0-9_-](.fifo)?
- #4 WaitTimeSeconds clamped to 0-20
- #5 ReceiveMessageWaitTimeSeconds clamped to 0-20
- #6 DelaySeconds clamped to 0-900
- #7 VisibilityTimeout clamped to 0-43200
- #8 MaxNumberOfMessages clamped to 1-10
- #9 Message attributes limited to 10 per message
- #15 BatchEntryId length validated (max 80)
- #16 DeduplicationID length validated (max 128)
- #17 GroupID length validated (max 128)
Phase 3 (Per-tenant resource limits):
- #11 Max messages per queue (120K standard, 20K FIFO)
- #12 Global tenant limit (1000)
- #3.5 HTTP request body size limit (1MB via MaxBytesReader)
Phase 4 (Stability):
- #14 Duplicates map cleanup (already in PeriodicTasks)
- #13 FIFO group lock timeout (already in visibility timeout reset)
- #18 Redis size guard: skip save if >50MB
Skipped (Low, no real risk):
- #19 {account} URL param (informational only, not used for access)
- #20 ReceiptHandle format (self-validating UUID#UUID)
New file: app/gosqs/validation.go — centralized AWS SQS limits and validators
2026-04-10 18:58:40 +03:00
Naeel
b9d434bcc5
v0.1.16: JWT auth via nubes API, auto-provisioning, UI login
...
- app/auth/jwt.go: ParseJWTClaims, TenantIDFromSub (sless-compatible SHA256), PingNubesAPI
- app/admin/admin.go: POST /ui/api/auth endpoint, jwtMiddleware for /ui/api/*
- app/tenant/tenant_store.go: NubesSub/Email fields, GetBySub, CreateFromJWT
- app/ui/index.html: login page, email in navbar, JWT session in localStorage
- deployments/k8s/deployment.yaml: v0.1.16, NUBES_ENDPOINT env
- doc/decisions/resource-limits-plan.md: 20 vulnerabilities audit
- Fix: /ui/api/auth moved to subrouter (gorilla/mux PathPrefix conflict)
2026-04-10 18:35:19 +03:00
Naeel
c3ba2dcae4
chore: initial import from sless/shared-sqs (v0.1.14)
...
- Standalone SQS-service repository
- Multi-tenant message queue service, AWS SQS compatible
- Based on GoAws, with mutable tenants, auth, WebUI, Redis persistence
- Ready for independent development and deployment
- See doc/ and README.md for architecture and usage
2026-04-10 16:47:27 +03:00
“Naeel”