Jan Larwig
0ab0bb01a5
Merge commit from fork
...
* fix: validate trusted IP proxy headers
Respect trusted proxy boundaries before using real-client-IP headers for authentication bypass decisions and safely traverse X-Forwarded-For chains.
Signed-off-by: Jan Larwig <jan@larwig.com >
* fix: trusted-ip header bypass
Signed-off-by: Jan Larwig <jan@larwig.com >
* docs: add changelog entry
Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz >
---------
Signed-off-by: Jan Larwig <jan@larwig.com >
Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz >
2026-10-01 10:42:18 +02:00
Jan Larwig
aff369dfa3
Merge commit from fork
...
Signed-off-by: Jan Larwig <jan@larwig.com >
2026-04-13 18:22:56 +02:00
Jan Larwig
cc0b48d5ec
ci: fix linter warnings for preallocation
...
Signed-off-by: Jan Larwig <jan@larwig.com >
2026-01-17 16:01:14 +01:00
yudrywet
4fe0d5659b
chore: fix function names in comment
...
Signed-off-by: yudrywet <yudeyao@yeah.net >
2024-09-15 09:34:15 +02:00
Segfault16 and Sebastian Halder
965fab422d
Add API route config ( #1760 )
...
* Add API route config
In addition to requests with Accept header `application/json` return 401 instead of 302 to login page on requests matching API paths regex.
* Update changelog
* Refactor
* Remove unnecessary comment
* Reorder checks
* Lint Api -> API
Co-authored-by: Sebastian Halder <sebastian.halder@boehringer-ingelheim.com >
2022-09-11 16:09:32 +01:00
Nick Meves
b7b7ade7c4
Improve AllowedRoute test table formatting
2020-10-07 10:13:41 -07:00
Nick Meves
183cb124a4
Support HTTP method based allowlists
2020-10-07 10:13:40 -07:00
Jan Larwig