Nick Craig-Wood
f191448b0d
rc: flip auth default so all endpoints require auth unless opted out
...
Replace AuthRequired bool with NoAuth bool on the rc.Call struct and
flip the auth check logic. Previously endpoints were unauthenticated
by default and had to opt in with AuthRequired: true, which led to
security vulnerabilities when developers forgot to set the flag.
Now all endpoints require authentication by default. Only explicitly
safe read-only endpoints are marked with NoAuth: true:
- rc/noop
- rc/error
- rc/list
- core/version
- core/stats
- core/group-list
- core/transferred
- core/du
- cache/stats
- vfs/list
- vfs/stats
- vfs/queue
- job/status
- job/list
See GHSA-25qr-6mpr-f7qx, GHSA-jfwf-28xr-xw6q
2026-04-19 13:31:27 +01:00
..
2025-08-26 12:04:00 +02:00
2026-04-10 11:39:50 +01:00
2026-04-18 17:48:03 +01:00
2025-10-02 18:46:16 +02:00
2025-11-04 23:00:46 +01:00
2026-04-19 13:31:27 +01:00
2024-08-15 18:26:34 +02:00
2025-08-26 12:04:00 +02:00
2025-08-26 12:04:00 +02:00
2024-08-15 18:26:34 +02:00
2025-08-26 12:04:00 +02:00
2026-02-18 12:11:52 +00:00
2025-10-03 15:54:15 +01:00
2025-09-15 12:45:57 +01:00
2025-08-26 12:04:00 +02:00
2025-11-01 15:33:38 +01:00
2026-02-17 11:46:37 +00:00
2025-11-13 13:47:40 +00:00
2025-11-01 15:33:38 +01:00
2025-11-01 15:33:38 +01:00
2025-08-26 12:04:00 +02:00
2025-08-26 12:04:00 +02:00
2025-11-01 15:33:38 +01:00
2025-09-02 14:06:31 +02:00
2026-01-18 20:48:33 +01:00
2026-04-11 15:27:05 +01:00
2025-11-01 15:33:38 +01:00
2025-11-01 15:33:38 +01:00
2025-08-26 12:04:00 +02:00
2025-12-15 09:11:00 +01:00
2025-11-01 15:33:38 +01:00
2025-11-01 15:33:38 +01:00
2026-01-18 20:48:33 +01:00
2025-11-01 15:33:38 +01:00
2025-08-26 12:04:00 +02:00
2023-08-02 12:53:09 +01:00
2025-08-17 12:57:35 +01:00
2024-12-13 12:43:20 +00:00
2026-04-19 13:31:27 +01:00
2025-08-26 12:04:00 +02:00
2025-11-01 15:33:38 +01:00
2025-10-27 13:34:58 +00:00
2026-04-13 12:48:38 +01:00
2026-01-18 20:56:26 +01:00
2025-08-26 12:04:00 +02:00
2026-04-19 13:31:27 +01:00
2025-11-01 15:33:38 +01:00
2025-08-26 12:04:00 +02:00
2022-12-03 18:58:55 +01:00
2025-08-26 12:04:00 +02:00
2025-08-26 12:04:00 +02:00
2025-08-26 12:04:00 +02:00
2026-04-19 13:31:27 +01:00
2025-11-01 15:33:38 +01:00
2025-08-26 12:04:00 +02:00
2025-08-26 12:04:00 +02:00
2025-08-26 12:04:00 +02:00
2025-11-21 17:02:45 +00:00
2026-02-26 16:20:24 +00:00
2025-08-26 12:04:00 +02:00
2025-11-01 15:33:38 +01:00
2026-02-18 12:11:52 +00:00
2024-02-29 14:46:50 +00:00
2025-11-04 23:00:46 +01:00
2026-02-18 12:11:52 +00:00
2024-04-18 16:53:55 +02:00
2024-04-18 16:53:55 +02:00
2024-09-06 17:04:18 +01:00
2024-04-18 16:53:55 +02:00