Dominik Schmidt 7f7a938c3f fix(proxy): restrict JWT signed urls to the allowed HTTP methods ...

The legacy OC-Signature path already rejects methods outside
PRE_SIGNED_URL_ALLOWED_HTTP_METHODS, the JWT path did not. A leaked
signed download url could be used for PUT, DELETE, MOVE or PROPFIND
as the signing user for the lifetime of the signature.

2026-09-07 13:00:09 +02:00

..

accesslog.go

use plain pkg module

2025-01-13 16:42:19 +01:00

account_resolver_test.go

chore: replace interface with any

2026-04-23 09:31:11 +02:00

account_resolver.go

chore: replace interface with any

2026-04-23 09:31:11 +02:00

app_auth_test.go

appauth: Add token and user (with roles) to context

2025-04-30 10:17:58 +02:00

app_auth.go

appauth: Add token and user (with roles) to context

2025-04-30 10:17:58 +02:00

authentication_test.go

chore: replace interface with any

2026-04-23 09:31:11 +02:00

authentication.go

enhancement: make collaboration font management functionality public

2026-06-11 09:28:37 +02:00

basic_auth_test.go

Adjust LDAP Schema for new name

2025-01-29 11:58:57 +01:00

basic_auth.go

chore: replace interface with any

2026-04-23 09:31:11 +02:00

context_logger.go

use plain pkg module

2025-01-13 16:42:19 +01:00

create_home.go

Do not try to create personal spaces for lightweight or service users

2026-06-19 11:05:44 +02:00

datagateway.go

send all /data throught middleware

2026-08-21 07:34:46 +02:00

https_redirect.go

rename folder extensions -> services

2022-06-27 14:05:36 +02:00

metrics.go

change module name

2025-01-13 09:58:18 +01:00

middleware_suite_test.go

add tests for the basic auth middleware

2022-08-12 10:48:09 +02:00

oidc_auth_test.go

fix(proxy): honor access token cache ttl

2026-07-14 17:49:40 +02:00

oidc_auth.go

fix: oidc middleware claim race

2026-08-11 11:39:50 +02:00

options.go

proxy: Allow mapping from an external tenant id to the internal id

2026-04-09 17:46:50 +02:00

policies_test.go

refactor(policies): read the rego policies once at startup

2026-08-12 17:01:49 +02:00

policies.go

refactor(policies): read the rego policies once at startup

2026-08-12 17:01:49 +02:00

public_share_auth_test.go

Use constant instead of repeating the "x-access-token" string over and over

2025-04-30 10:17:58 +02:00

public_share_auth.go

feat: add userid to spans (#2536)

2026-03-30 10:32:24 +02:00

security_test.go

adapt tests & deepmerge

2025-11-19 09:38:16 +01:00

security.go

chore: replace interface with any

2026-04-23 09:31:11 +02:00

selector_cookie.go

feat(tracing): Improve tracing for proxy middlewares

2025-09-02 17:02:04 +02:00

signed_url_auth_test.go

fix(proxy): restrict JWT signed urls to the allowed HTTP methods

2026-09-07 13:00:09 +02:00

signed_url_auth.go

fix(proxy): restrict JWT signed urls to the allowed HTTP methods

2026-09-07 13:00:09 +02:00

tracing.go

fix(tracing): Don't start separate span for request-id attr

2025-09-02 12:13:11 +02:00