Ralf Haferkamp a256da502b fix(proxy): suppress auth challenges for failed signed URLs ...

Do not set WWW-Authenticate headers when an active signed URL
authentication attempt fails. Signed URL clients cannot respond to Basic
or Bearer challenges, and advertising them may trigger unintended
authentication prompts.

Keep returning 401 Unauthorized while preserving the existing challenge
behavior for unsigned requests and disabled signed URL mechanisms.

2026-09-11 11:51:01 +02:00

..

accesslog.go

use plain pkg module

2025-01-13 16:42:19 +01:00

account_resolver_test.go

chore: replace interface with any

2026-04-23 09:31:11 +02:00

account_resolver.go

chore: replace interface with any

2026-04-23 09:31:11 +02:00

app_auth_test.go

appauth: Add token and user (with roles) to context

2025-04-30 10:17:58 +02:00

app_auth.go

appauth: Add token and user (with roles) to context

2025-04-30 10:17:58 +02:00

authentication_test.go

chore: replace interface with any

2026-04-23 09:31:11 +02:00

authentication.go

fix(proxy): suppress auth challenges for failed signed URLs

2026-09-11 11:51:01 +02:00

basic_auth_test.go

Adjust LDAP Schema for new name

2025-01-29 11:58:57 +01:00

basic_auth.go

chore: replace interface with any

2026-04-23 09:31:11 +02:00

context_logger.go

use plain pkg module

2025-01-13 16:42:19 +01:00

create_home.go

Do not try to create personal spaces for lightweight or service users

2026-06-19 11:05:44 +02:00

datagateway.go

send all /data throught middleware

2026-08-21 07:34:46 +02:00

https_redirect.go

rename folder extensions -> services

2022-06-27 14:05:36 +02:00

metrics.go

change module name

2025-01-13 09:58:18 +01:00

middleware_suite_test.go

add tests for the basic auth middleware

2022-08-12 10:48:09 +02:00

oidc_auth_test.go

upd tests for auth requests middelware

2026-09-08 09:37:51 +02:00

oidc_auth.go

log jwt expired on debug level instead of error

2026-09-08 09:37:51 +02:00

options.go

proxy: Allow mapping from an external tenant id to the internal id

2026-04-09 17:46:50 +02:00

policies_test.go

refactor(policies): read the rego policies once at startup

2026-08-12 17:01:49 +02:00

policies.go

refactor(policies): read the rego policies once at startup

2026-08-12 17:01:49 +02:00

public_share_auth_test.go

Use constant instead of repeating the "x-access-token" string over and over

2025-04-30 10:17:58 +02:00

public_share_auth.go

feat: add userid to spans (#2536)

2026-03-30 10:32:24 +02:00

security_test.go

adapt tests & deepmerge

2025-11-19 09:38:16 +01:00

security.go

chore: replace interface with any

2026-04-23 09:31:11 +02:00

selector_cookie.go

feat(tracing): Improve tracing for proxy middlewares

2025-09-02 17:02:04 +02:00

signed_url_auth_test.go

fix(proxy): suppress auth challenges for failed signed URLs

2026-09-11 11:51:01 +02:00

signed_url_auth.go

fix(proxy): suppress auth challenges for failed signed URLs

2026-09-11 11:51:01 +02:00

tracing.go

fix(tracing): Don't start separate span for request-id attr

2025-09-02 12:13:11 +02:00