chore: add proprietary license (All Rights Reserved)

- Add whitelist of valid actions to prevent arbitrary action values
- Fix error handling to properly detect database failures

Previously, any action value was accepted without validation, which could lead to unexpected behavior. The health check also incorrectly set dbOK to true when queries succeeded, now correctly sets it to false when errors occur.

.github/workflows/ci-cd.yml

@@ -4,7 +4,7 @@ on:
   push:
     branches: [main, master]
     paths: 
-      - 'src/'
+      - 'src/**'
   pull_request:
     branches: [main, master]
 
@@ -22,6 +22,9 @@ jobs:
       - name: Download dependencies
         run: /usr/local/go/bin/go mod download
 
+      - name: Tidy modules
+        run: /usr/local/go/bin/go mod tidy
+
       - name: Check formatting
         run: |
           if [ "$(/usr/local/go/bin/gofmt -l $(find . -name '*.go' -not -path './vendor/*'))" ]; then
@@ -76,7 +79,7 @@ jobs:
         run: |
           docker buildx build \
             --platform linux/amd64 \
-            --tag "git.yejayekhoob.com/db123/auth-proxy:${{ github.sha }}" \
+            --tag "git.yejayekhoob.com/yjkh/auth-proxy:${{ github.sha }}" \
-            --tag "git.yejayekhoob.com/db123/auth-proxy:latest" \
+            --tag "git.yejayekhoob.com/yjkh/auth-proxy:latest" \
             --push \
             .

.gitignore

@@ -1,2 +1,3 @@
 *.exe
-*.env
+*.env
+*.db*

LICENSE

@@ -0,0 +1,5 @@
+Copyright (c) 2026 db123. All Rights Reserved.
+
+This software and associated documentation files (the "Software") are proprietary and confidential. No part of the Software may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the copyright holder.
+
+For licensing inquiries, contact: erfan@db123.ir

src/auth.go

@@ -243,8 +243,15 @@ func parseLogFilter(r *http.Request) (*logFilter, error) {
 		Offset: 0,
 	}
 
+	validActions := map[string]bool{
+		"add_temp": true, "delete_temp": true,
+		"add_perm": true, "delete_perm": true, "expire_temp": true,
+	}
+
 	if v := r.URL.Query().Get("action"); v != "" {
-		f.Action = v
+		if validActions[v] {
+			f.Action = v
+		}
 	}
 	if v := r.URL.Query().Get("ip"); v != "" {
 		f.IP = v
@@ -302,8 +309,8 @@ func logsHandler(db *sql.DB) http.HandlerFunc {
 		logs := make([]map[string]interface{}, 0)
 		for rows.Next() {
 			var ts time.Time
-			var action, apiClientIP string
+			var action string
-			var ip, reason sql.NullString
+			var ip, reason, apiClientIP sql.NullString
 			var ttlSeconds sql.NullInt64
 			if err := rows.Scan(&ts, &action, &ip, &ttlSeconds, &reason, &apiClientIP); err != nil {
 				continue
@@ -311,7 +318,7 @@ func logsHandler(db *sql.DB) http.HandlerFunc {
 			entry := map[string]interface{}{
 				"timestamp":     ts,
 				"action":        action,
-				"api_client_ip": apiClientIP,
+				"api_client_ip": apiClientIP.String,
 				"reason":        reason.String,
 			}
 			if ip.Valid {
@@ -333,13 +340,13 @@ func statusHandler(db *sql.DB) http.HandlerFunc {
 	return func(w http.ResponseWriter, r *http.Request) {
 		var permCount int
 		var tempCount int
-		dbOK := false
+		dbOK := true
 
-		if err := db.QueryRow(`SELECT COUNT(*) FROM perm_whitelist`).Scan(&permCount); err == nil {
+		if err := db.QueryRow(`SELECT COUNT(*) FROM perm_whitelist`).Scan(&permCount); err != nil {
-			dbOK = true
+			dbOK = false
 		}
-		if err := db.QueryRow(`SELECT COUNT(*) FROM temp_whitelist WHERE expires_at > ?`, time.Now().Format(time.RFC3339)).Scan(&tempCount); err == nil {
+		if err := db.QueryRow(`SELECT COUNT(*) FROM temp_whitelist WHERE expires_at > ?`, time.Now().Format(time.RFC3339)).Scan(&tempCount); err != nil {
-			dbOK = true
+			dbOK = false
 		}
 
 		health := map[string]interface{}{