passwall/passwall-server
Fork: 105 Star: 755 (更新于 2024-11-05 11:09:45)
license: AGPL-3.0
Language: Go .
Passwall Server is the core backend infrastructure for Passwall platform
最后发布版本: v1.2.1 ( 2022-08-22 13:43:18)
PassWall Server
PassWall Server is the core backend for open source password manager PassWall platform. Using this server, you can safely store your passwords and access them from anywhere.
Support
I promise all the coffee you have ordered will be spent on this project
Clients
PassWall Server can be used with PassWall Desktop
On Premise Installation
- Pull passwall-server image from Docker Hub.
docker pull passwall/passwall-server
- Download the docker-compose.yml file and start the server with the following commands.
mkdir $HOME/passwall-server
cd $HOME/passwall-server
wget https://raw.githubusercontent.com/passwall/passwall-server/main/docker-compose.yml
docker-compose up -d
- Create a new user with passwall-cli.
docker exec -it passwall-server /app/passwall-cli
- Download and install any passwall client you want from paswall.io.
- Open your client and write http://localhost:3625 into the server url field. Login with your newly created user information.
API Documentation
API documentation available at Postman Public Directory
Security
-
PassWall uses The Advanced Encryption Standard (AES) encryption algorithm with Galois/Counter Mode (GCM) symmetric-key cryptographic mode. Passwords encrypted with AES can only be decrypted with the passphrase defined in the config.yml file.
-
Endpoints are protected with security middlewares against attacks like XSS.
-
Against SQL injection, PassWall uses Gorm package to handle database queries which clears all queries.
-
There is rate limiter for signin attempts against brute force attacks.
Environment Variables
These environment variables are accepted:
Server Variables:
- PORT
- PW_SERVER_USERNAME
- PW_SERVER_PASSWORD
- PW_SERVER_PASSPHRASE
- PW_SERVER_SECRET
- PW_SERVER_TIMEOUT
- PW_SERVER_GENERATED_PASSWORD_LENGTH
- PW_SERVER_ACCESS_TOKEN_EXPIRE_DURATION
- PW_SERVER_REFRESH_TOKEN_EXPIRE_DURATION
Database Variables
- PW_DB_NAME
- PW_DB_USERNAME
- PW_DB_PASSWORD
- PW_DB_HOST
- PW_DB_PORT
- PW_DB_LOG_MODE
Hello Contributors
-
Don't send too much commit at once. It will be easier for us to do a code review.
-
Be sure to take a look at the dev branch. The version I am working on is there.
-
First try to fix
// TODO:
s in the code. -
Then you can contribute to the development by following the mile stones.
-
Don't mess with the user interface. The design guide has not been released yet.
最近版本更新:(数据更新于 2024-11-05 17:56:24)
2022-08-22 13:43:18 v1.2.1
2021-10-01 05:09:16 1.2.0
2021-03-21 16:48:37 v1.1.7
2021-03-20 13:19:42 v1.1.6
2020-11-01 05:41:05 v1.1.5
2020-10-31 04:03:44 v1.1.4
2020-10-29 05:12:24 v1.1.3
2020-08-03 16:38:53 v1.1.2
2020-06-24 13:55:22 v1.1.1
2020-05-03 05:55:18 v1.1.0
主题(topics):
api, crypto, go, golang, hacktoberfest, password, password-manager
passwall/passwall-server同语言 Go最近更新仓库
2024-11-05 08:55:31 XTLS/Xray-core
2024-11-05 00:03:47 SagerNet/sing-box
2024-11-04 20:34:19 Permify/permify
2024-11-04 15:07:27 containerd/containerd
2024-11-03 20:10:56 flipped-aurora/gin-vue-admin
2024-11-03 00:46:25 dolthub/dolt