aboutsummaryrefslogtreecommitdiff
path: root/weed/security
AgeCommit message (Expand)AuthorFilesLines
2025-08-06remove spoof-able request header (#7103)Chris Lu1-28/+2
2025-08-06remote address parsing should handle special cases (#7101)Chris Lu1-19/+54
2024-12-02[security] reload whiteList on http seerver (#6302)Konstantin Lebedev1-29/+40
2024-08-01fix CVE-2016-2183 (#5844)zuzuviewer1-6/+76
2024-06-22update advancedtlschrislu1-13/+13
2023-12-05Add a way to use a JWT in an HTTP only cookiejerebear121-0/+8
2023-08-22upgrade jwtchrislu1-1/+1
2023-08-21change from deprecated jwt.StandardClaims to new jwt.RegisteredClaimschrislu1-6/+6
2023-06-04S3 TLS credentials Refreshing (#4506)Konstantin Lebedev1-5/+8
2023-02-21Updated the deprecated ioutil dependency (#4239)Zachary Walters1-2/+2
2022-09-14go fmtchrislu1-10/+9
2022-07-29fix deprecated functionschrislu1-5/+6
2022-07-29move to https://github.com/seaweedfs/seaweedfschrislu3-4/+4
2022-06-27avoid set currentMaster k8s svc.local discoveruy service domainsKonstantin Lebedev1-1/+1
2022-06-24rm defer commentsKonstantin Lebedev1-2/+1
2022-06-24fix AuthenticateKonstantin Lebedev1-45/+23
2022-06-24enable require client certKonstantin Lebedev1-3/+3
2022-06-24seperate optionKonstantin Lebedev1-6/+18
2022-06-23initial advancedtlsKonstantin Lebedev1-30/+63
2022-03-16Add mTLS support for both master and volume http server.Berck Nash1-0/+18
2021-12-30FEATURE: add JWT to HTTP endpoints of Filer and use them in S3 ClientSebastian Kurfuerst1-0/+29
2021-12-29Refactor: pass in claim type into security.DecodeJwtSebastian Kurfuerst1-2/+2
2021-12-29rename security.GenJwt to security.GenJwtForVolumeServerSebastian Kurfuerst1-1/+3
2021-12-29fix typo in error messageSebastian Kurfuerst1-1/+1
2021-10-14refactor: move from io/ioutil to io and os packageEng Zer Jun1-8/+8
2021-07-22fix security alert on github.com/dgrijalva/jwt-goChris Lu1-1/+1
2021-03-10add commentsKonstantin Lebedev1-5/+6
2021-03-10allowed wildcard domainKonstantin Lebedev1-11/+17
2021-03-10comma-separated SSL certificate common namesKonstantin Lebedev1-1/+2
2021-03-08TLS allowed commonNamesKonstantin Lebedev1-4/+7
2021-03-08permitCommonNamesKonstantin Lebedev1-5/+46
2021-01-12avoid concurrent map updates to viperChris Lu1-4/+3
2020-11-22fix tls grpc ca pathlimd1-2/+2
2020-09-20refactorChris Lu1-3/+3
2020-09-20adjust loggingChris Lu1-1/+6
2020-05-25simplify func(w http.ResponseWriter, r *http.Request) to http.HandlerFuncbingoohuang1-1/+1
2020-02-22adjust log levelChris Lu1-6/+8
2020-01-29support env variables to overwrite toml fileChris Lu1-2/+2
2019-06-06jwt for read access controlChris Lu1-8/+16
2019-05-28working with reading remote intervalsChris Lu1-1/+1
2019-05-04master: add jwt expires_after_secondsChris Lu2-8/+10
2019-02-18adding grpc mutual tlsChris Lu1-0/+66
2019-02-15benchmark can work in secure modeChris Lu1-3/+2
2019-02-14add authorizing fileId write accessChris Lu2-77/+25
2019-02-09cleanup security.SecretChris Lu2-11/+11
2019-02-06fixing of typosSergey1-1/+1
2016-06-26adjust loggingChris Lu1-1/+1
2016-06-18fix compilation problem due to API changesChris Lu1-3/+5
2016-06-02directory structure change to work with glideChris Lu2-0/+234