eliott/ocis
1
0
Fork 0
mirror of https://github.com/owncloud/ocis synced 2026-04-26 01:35:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

add unprotected flag to the proxy routes

Browse Source 
I added an unprotected flag to the proxy routes which is evaluated by
the authentication middleware. This way we won't have to maintain a
hardcoded list of unprotected paths and path prefixes and we will
hopefully reduce the times we encounter the basic auth prompt by web
browsers.
This commit is contained in:
David Christofas
2022-08-25 23:29:47 +02:00
committed by Ralf Haferkamp
parent 4d4f3a16e1
commit 69ba80562e
5 changed files with 110 additions and 136 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
services/proxy/pkg/config/defaults/defaultconfig.go
View File

@@ -71,20 +71,24 @@ func DefaultPolicies() []config.Policy {
Name: "ocis",
Routes: []config.Route{
{
Endpoint: "/",
Backend: "http://localhost:9100",
Endpoint: "/",
Backend: "http://localhost:9100",
Unprotected: true,
},
{
Endpoint: "/.well-known/",
Backend: "http://localhost:9130",
Endpoint: "/.well-known/",
Backend: "http://localhost:9130",
Unprotected: true,
},
{
Endpoint: "/konnect/",
Backend: "http://localhost:9130",
Endpoint: "/konnect/",
Backend: "http://localhost:9130",
Unprotected: true,
},
{
Endpoint: "/signin/",
Backend: "http://localhost:9130",
Endpoint: "/signin/",
Backend: "http://localhost:9130",
Unprotected: true,
},
{
Endpoint: "/archiver",
@@ -161,24 +165,27 @@ func DefaultPolicies() []config.Policy {
Backend: "http://localhost:9140",
},
{
Endpoint: "/app/", // /app or /apps? ocdav only handles /apps
Backend: "http://localhost:9140",
Endpoint: "/app/", // /app or /apps? ocdav only handles /apps
Backend: "http://localhost:9140",
Unprotected: true, // TODO check if this is safe
},
{
Endpoint: "/graph/",
Backend: "http://localhost:9120",
},
{
Endpoint: "/graph-explorer",
Backend: "http://localhost:9135",
Endpoint: "/graph-explorer",
Backend: "http://localhost:9135",
Unprotected: true,
},
{
Endpoint: "/api/v0/settings",
Backend: "http://localhost:9190",
},
{
Endpoint: "/settings.js",
Backend: "http://localhost:9190",
Endpoint: "/settings.js",
Backend: "http://localhost:9190",
Unprotected: true,
},
},
},