aboutsummaryrefslogtreecommitdiff
path: root/weed/security/guard.go
AgeCommit message (Collapse)AuthorFilesLines
2025-08-06remove spoof-able request header (#7103)Chris Lu1-28/+2
* remove spoof-able request header https://github.com/seaweedfs/seaweedfs/issues/7094#issuecomment-3158320497 * Update weed/security/guard.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-08-06remote address parsing should handle special cases (#7101)Chris Lu1-19/+54
* remote address parsing should handle special cases * handling ipv6 * simplify * Update weed/security/guard.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * Update weed/security/guard.go Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> * x-real-ip * Update guard.go * fixes Hostname Whitelisting: Fully restored - supports localhost, example.com, etc. IP Whitelisting: Still works - supports exact IPs and CIDR ranges Header Support: Consistent handling of X-Forwarded-For, X-Real-IP * simplify * Update weed/security/guard.go Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> * Update weed/security/guard.go Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> * Update guard.go * adjust function signature * Update weed/security/guard.go Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> * indention * skip empty host --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2024-12-02[security] reload whiteList on http seerver (#6302)Konstantin Lebedev1-29/+40
* reload whiteList * white_list add to scaffold
2022-09-14go fmtchrislu1-10/+9
2022-07-29move to https://github.com/seaweedfs/seaweedfschrislu1-1/+1
2021-12-29fix typo in error messageSebastian Kurfuerst1-1/+1
2020-05-25simplify func(w http.ResponseWriter, r *http.Request) to http.HandlerFuncbingoohuang1-1/+1
2019-06-06jwt for read access controlChris Lu1-8/+16
2019-05-28working with reading remote intervalsChris Lu1-1/+1
2019-05-04master: add jwt expires_after_secondsChris Lu1-4/+5
2019-02-14add authorizing fileId write accessChris Lu1-50/+6
need to secure upload/update/delete for benchmark/filer/mount need to add secure grpc
2019-02-09cleanup security.SecretChris Lu1-2/+2
2019-02-06fixing of typosSergey1-1/+1
2016-06-26adjust loggingChris Lu1-1/+1
2016-06-02directory structure change to work with glideChris Lu1-0/+162
glide has its own requirements. My previous workaround caused me some code checkin errors. Need to fix this.