a-nau/password-protected-website-template

Template to create and host a simple password-protected website with Github Pages.

Hi there 👋

Deep Learning

• TAMPAR: Tampering detection for parcel logistics from our WACV '24 paper "TAMPAR: Visual Tampering Detection for Parcel Logistics in Postal Supply Chains"
• CubeRefine R-CNN: architecture for 3D Reconstruction for potentially damaged parcels from our CVPRW '23 paper "Parcel3D: Shape Reconstruction From Single RGB Images for Applications in Transportation Logistics"
• lanelet2anchors: pip package for the generation of diverse map-based anchor paths from our CVPRW' 23 paper "Lanelet2 for nuScenes: Enabling Spatial Semantic Relationships and Diverse Map-based Anchor Paths"
• Repos of paper "Scrape, Cut, Paste and Learn: Automated Dataset Generation Applied to Parcel Logistics"
  • Dataset Generator: Synthetic instance segmentation dataset generation
  • Image Scraping: Image scraping from Google, Bing, Baidu and Yahoo
  • CNN Training Detectron2: CNN Training with Detectron2, including Github CI
• Minimal template for publishing research code
• Code of paper "Refined Plane Segmentation for Cuboid-Shaped Objects by Leveraging Edge Detection"
• Allocentric vs. egocentric pose of an object

Web Development

• aideadlin.es key contributor in collaboration with Papers With Code; maintaining own fork that supports filtering by ranking at deadlines.info
• Markdownslides: Markdown-based slides hosted with Github Pages
• PPW: Template to create and host a simple password-protected website with Github Pages

Other

• yaml2pyclass: Code generator that produces a Python class from a YAML input file as pip package
• pdf-link-checker: Github Action and CLI tool to automatically check all links in a PDF for dead or broken links
• latex-devcontainer: Hassle-free usage of LaTeX in VS Code using Devcontainer
• Easy usage of shortcuts for Windows with AutoHotKey
• Scripts to automatically map a specific CUDA version to a Conda Python environment
• Extension to the standard Python logging package which facilitates tracking with Git and provides decorators for messages

password-protected-website-template's Issues

Fails clean up after encrypting index

Website is able to go live but I am unable to get passed this issue

Below is the error code

Run mv encrypted/main.html index.html
mv: cannot stat 'encrypted/main.html': No such file or directory
Error: Process completed with exit code 1.

bad password

hi, i have added the secret for the repo with the right name and given the secret value as password but still it gives me bad password while i'm entering same password i have saved as secret

Removing .staticrypt.json from the repo

I noticed you committed .staticrypt.json in the repo, is that the one used in the build step afterwards? The ideal would be to have each person using this project generate their own salt, otherwise someone computing a rainbow table for this project could use it against all people that used it. Unless I'm misunderstanding how you use it, I think you probably want to remove the config file from this project.

This gave me the idea of adding an easy way to generate a .staticrypt.json file - we can now use staticrypt --salt (without argument) to generate a salt and save it to a config file, that way we can create one without having to encrypt a dummy file locally or manually creating the config file. Just added it, it's available in 3.0.3. I wouldn't have thought about it without checking out this project again today, thanks for the inspiration!

Generation of new salt

Actually the template have an hardcoded salt in the config file of staticrypt, it's dangerous since there is no documentation or automation to prevent people using this salt. If it become common that people use this salt, the security of people using it will be lower since it will become the default one.

Salts defend against attacks that use precomputed tables (e.g. rainbow tables),[3] as they can make the size of table needed for a successful attack prohibitively large without burdening users. Since salts differ from one another, they also protect redundant (e.g. commonly used, re-used) passwords, as different salted hashes are created for different instances of the same password.

Source: Wikipedia
https://en.wikipedia.org/wiki/Salt_(cryptography)

Options:

• Better option will be to automatise the change of the salt at first launch.
• Second option is at minimum to explain this problem to users in the README with a security warning.

Adding website password on a local hosted site

Adding website password on a local hosted site

I am hosting the website from this repository on a private linux server with nginx.

The website is loding normally but I can't log in because now I have no way to define a password because I am hosting it locally and I don't have the option to create a GitHub secret. I also have Gitea installed if that helps? (I am a bit new to this scene)

So How could I define a password to use the website and is there any way to link the website to Gitea? (Hosting it directly with Gitea not nginx)

Thank's for you're help in advance!

password protect a directory within a repo

Thanks @a-nau for this great tool. I was wondering if it is possible to use your scripts to password protect only a directory within a github pages. Say I want to have test.github.io/secret password-protected, but everything else open. Is there a way to do that? if so, what would be the files/folders that I need to include under the directory secret ?

StatiCrypt 3.x

Hi @a-nau, just letting you know StatiCrypt 3.x is out. With it come a number of improvements, the most important one being using WebCrypto as a default engine, which is more secure that CryptoJS that we used before. There are also some breaking changes, hopefully easy to resolve (I'd be happy to hear if they're not).

This project is still listed in the "Community" section of StatiCrypt README, I'll mark it as compatible with 2.x only and useful for inspiration purpose for now. Let me know if you ever make it compatible with 3.x, and I'll update accordingly!