From e4001550c1fcda965865eb2798c94075c5559882 Mon Sep 17 00:00:00 2001
From: ed <s@ocv.me>
Date: Mon, 9 Oct 2023 00:36:54 +0000
Subject: [PATCH] v1.9.11

---
 copyparty/__version__.py |  4 ++--
 copyparty/httpcli.py     |  9 +--------
 docs/changelog.md        | 16 ++++++++++++++++
 3 files changed, 19 insertions(+), 10 deletions(-)

diff --git a/copyparty/__version__.py b/copyparty/__version__.py
index 50f2f7c1..2ec8e228 100644
--- a/copyparty/__version__.py
+++ b/copyparty/__version__.py
@@ -1,8 +1,8 @@
 # coding: utf-8
 
-VERSION = (1, 9, 10)
+VERSION = (1, 9, 11)
 CODENAME = "prometheable"
-BUILD_DT = (2023, 10, 8)
+BUILD_DT = (2023, 10, 9)
 
 S_VERSION = ".".join(map(str, VERSION))
 S_BUILD_DT = "{0:04d}-{1:02d}-{2:02d}".format(*BUILD_DT)
diff --git a/copyparty/httpcli.py b/copyparty/httpcli.py
index 5ae8a095..3e76dd1f 100644
--- a/copyparty/httpcli.py
+++ b/copyparty/httpcli.py
@@ -132,7 +132,7 @@ class HttpCli(object):
         self.mode = " "
         self.req = " "
         self.http_ver = " "
-        self.hint = " "
+        self.hint = ""
         self.host = " "
         self.ua = " "
         self.is_rclone = False
@@ -221,13 +221,6 @@ class HttpCli(object):
 
     def run(self) -> bool:
         """returns true if connection can be reused"""
-        self.keepalive = False
-        self.is_https = False
-        self.headers = {}
-        self.hint = ""
-        self.uname = self.pw = " "
-
-        self.out_headerlist = []
         self.out_headers = {
             "Vary": "Origin, PW, Cookie",
             "Cache-Control": "no-store, max-age=0",
diff --git a/docs/changelog.md b/docs/changelog.md
index 5d3eef06..d64bb961 100644
--- a/docs/changelog.md
+++ b/docs/changelog.md
@@ -1,3 +1,19 @@
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  
+# 2023-1008-2051  `v1.9.10`  badpwd
+
+## new features
+* argument `--log-badpwd` specifies how to log invalid login attempts;
+  * `0` = just a warning with no further information
+  * `1` = log incorrect password in plaintext (default)
+  * `2` = log sha512 hash of the incorrect password
+  * `1` and `2` are convenient for stuff like setting up autoban triggers for common passwords using fail2ban or similar
+
+## bugfixes
+* none!
+  * the formerly mentioned caching-directives bug turned out to be unreachable... oh well, better safe than sorry
+
+
+
 ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀  
 # 2023-1007-2229  `v1.9.9`  fix cross-volume dedup moves