my own indieAuth provider!
indiko.dunkirk.sh/docs
indieauth
oauth2-server
feat: auto update expires in security.txt
+10
-24
+10
-24
src/index.ts
+10
-24
src/index.ts
···
119
119
"/docs": docsHTML,
120
120
"/apps": appsHTML,
121
121
// Well-known endpoints
122
-
"/.well-known/security.txt": () =>
123
-
new Response(
122
+
"/.well-known/security.txt": () => {
123
+
const expiryDate = new Date();
124
+
expiryDate.setMonth(expiryDate.getMonth() + 3);
125
+
expiryDate.setSeconds(0, 0);
126
+
const expires = expiryDate.toISOString();
127
+
return new Response(
124
128
`# Security Contact Information for Indiko
125
129
# See: https://securitytxt.org/
126
-
127
130
Contact: mailto:security@dunkirk.sh
128
-
Expires: 2026-12-31T23:59:59.000Z
131
+
Expires: ${expires}
129
132
Preferred-Languages: en
130
133
Canonical: ${env.ORIGIN}/.well-known/security.txt
131
-
132
-
# Reporting Security Vulnerabilities
133
-
#
134
-
# If you discover a security vulnerability in Indiko, please report it
135
-
# responsibly by emailing security@dunkirk.sh with:
136
-
#
137
-
# - Description of the vulnerability
138
-
# - Steps to reproduce
139
-
# - Potential impact assessment
140
-
# - Any suggested fixes (optional)
141
-
#
142
-
# Please do not open public issues for security vulnerabilities.
143
-
# You will receive a response within 48 hours.
144
-
#
145
-
# We appreciate responsible disclosure and will credit researchers
146
-
# who report vulnerabilities (unless you prefer to remain anonymous).
147
-
148
-
Policy: https://github.com/taciturnaxolotl/indiko/blob/main/SECURITY.md
149
-
Acknowledgments: https://github.com/taciturnaxolotl/indiko/blob/main/SECURITY.md#security-audit-history
134
+
Policy: https://tangled.org/dunkirk.sh/indiko/blob/main/SECURITY.md
150
135
`,
151
136
{
152
137
headers: {
153
138
"Content-Type": "text/plain; charset=utf-8",
154
139
},
155
140
},
156
-
),
141
+
);
142
+
},
157
143
// API endpoints
158
144
"/api/hello": hello,
159
145
"/api/users": listUsers,