Laravel based code that runs my personal website
https://jonnybarnes.uk
- PHP 82.7%
- Blade 14.2%
- JavaScript 1.7%
- CSS 1.2%
- HTML 0.1%
- Other 0.1%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
Jonny Barnes
faf8e5c1ec
An Opus code review of the branch caught two real bugs the test suite
structurally couldn't see:
- /revocation and /introspect were never added to bootstrap/app.php's
CSRF except list, so both were fully broken (403) for any real
external client, despite every feature test passing — CSRF
verification is short-circuited entirely while running tests.
Verified live against the running app before and after the fix, and
added a regression test that asserts against the actual configured
exemptions rather than relying on request-time behavior that tests
can't exercise.
- An array-shaped `token` param (e.g. token[]=a&token[]=b) crashed
both endpoints with a 500, since this app promotes PHP warnings
("Array to string conversion") to exceptions. Fixed at the shared
root, MicropubToken::findActive(), which also closes the same latent
hole in VerifyMicropubToken's access_token param that predates this
branch. Verified live and covered with regression tests.
Also applied the review's lower-severity findings: added the missing
introspection_endpoint Link header and metadata test assertions,
removed the now-dead is_string($scopes) array branch in the Micropub
handlers and media controller (scope is unconditionally a string from
the DB now, this guarded against a JWT-array-claim shape that can no
longer occur), dropped a redundant #[Table] model attribute, sized
token_hash to its actual 64-char length, and removed a one-off inline
style in the admin view.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014625MfkGZ7GVdbqKme4a8L
|
||
| app | ||
| bootstrap | ||
| config | ||
| database | ||
| public | ||
| resources | ||
| routes | ||
| scripts | ||
| storage | ||
| tests | ||
| .editorconfig | ||
| .env.example | ||
| .gitattributes | ||
| .gitignore | ||
| .stylelintrc | ||
| artisan | ||
| composer.json | ||
| composer.lock | ||
| docker-compose.yml | ||
| eslint.config.js | ||
| helpers.php | ||
| jbuk_dev_backup.dump | ||
| license.md | ||
| package-lock.json | ||
| package.json | ||
| phpcs.xml | ||
| phpunit.xml | ||
| pint.json | ||
| readme.md | ||
| server.php | ||
jonnybarnes.uk
This is the code that runs my website, jonnybarnes.uk.
In theory this is usable by others now 🚀
Set up the database, this software needs PostgreSQL, after installing:
$ createdb -E utf8 db_name
First get the code, and make sure you’re on the master branch. This branch will
only have tagged releases:
$ git clone https://github.com/jonnybarnes/jonnybarnes.uk mysite.com
$ cd mysite.com
$ git checkout master
Then we need to set up the environment variables that the app will use.
$ cp .env.example .env
$ vim .env
Fill in the various variables. Then we can set up the app:
$ composer install
$ php artisan key:generate
$ php artisan migrate
Now we need to edit some config values. In config/app.php edit name.
Some other things that should be changed. Go to resources/views/master.blade.php,
you may not want to link to a projects page. Also in the <head> the two last links
are to my profile pic and pgp key, ammend/remove as desired.
Now point your server to public/index.php et viola. Essentially this is a
Laravel app so debugging things shouldn’t be too hard.