diff options
| author | jerebear12 <72420925+jerebear12@users.noreply.github.com> | 2023-12-20 18:21:11 -0600 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-12-20 16:21:11 -0800 |
| commit | 06343f897645c4650f8f65e9a7ecd9b255820cfd (patch) | |
| tree | ff6053af3bb23025a8d66f4275a460aa3ce1fbdf /weed/command/scaffold | |
| parent | 3c9bcfb864b6c06cdc8ca189655a896feab9d343 (diff) | |
| download | seaweedfs-06343f897645c4650f8f65e9a7ecd9b255820cfd.tar.xz seaweedfs-06343f897645c4650f8f65e9a7ecd9b255820cfd.zip | |
Set allowed origins in config (#5109)
* Add a way to use a JWT in an HTTP only cookie
If a JWT is not included in the Authorization header or a query string, attempt to get a JWT from an HTTP only cookie.
* Added a way to specify allowed origins header from config
* Removed unecessary log
* Check list of domains from config or command flag
* Handle default wildcard and change name of config value to cors
Diffstat (limited to 'weed/command/scaffold')
| -rw-r--r-- | weed/command/scaffold/security.toml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/weed/command/scaffold/security.toml b/weed/command/scaffold/security.toml index e5452cdff..9626ee58c 100644 --- a/weed/command/scaffold/security.toml +++ b/weed/command/scaffold/security.toml @@ -4,6 +4,11 @@ # /etc/seaweedfs/security.toml # this file is read by master, volume server, and filer +# comma separated origins allowed to make requests to the filer and s3 gateway. +# enter in this format: https://domain.com, or http://localhost:port +[cors.allowed_origins] +values = "*" + # this jwt signing key is read by master and volume server, and it is used for write operations: # - the Master server generates the JWT, which can be used to write a certain file on a volume server # - the Volume server validates the JWT on writing |