| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | login: the session cookie Secure behind a TLS proxy | tv | 3 days | 1 | -1/+4 |
| | | | | | | | | | | | | Review finding 12, browsers: the session cookie had no Secure flag. Behind a TLS proxy, the token it carries went over plain HTTP if someone typed http://. POST /auth/session now sets Secure when the request came over TLS, as the proxy says (X-Forwarded-Proto, or Forwarded's proto, of the first hop). A client saying so itself only keeps its own cookie off plain HTTP. operations.md's nginx example sets the header. | ||||
| * | dashboard: without LINKS; LINKS removed | tv | 3 days | 1 | -2/+1 |
| | | | | | | | | | | The dashboard reads every member's links from the members themselves; LINKS and LINKS_REPLY, swarm::links and their wire tags go (wire version bumped). Nodes the browser can't reach are drawn from what the reachable ones measure. Auth plan M3. | ||||
| * | docs: tokens through a proxy; token formats later | tv | 3 days | 1 | -13/+51 |
| | | | | | | | | | operations.md: an nginx proxy passing requests with a token on to the node and asking the others for its own login. future-work: other token formats. Auth plan M2. | ||||
| * | add stream heartbeat | tv | 8 days | 1 | -3/+4 |
| | | |||||
| * | api: allow listening to Unix sockets | tv | 8 days | 1 | -9/+45 |
| | | |||||
| * | api: support serving under a path prefix | tv | 9 days | 1 | -0/+4 |
| | | |||||
| * | api: /stream & dashboard send X-Accel-Buffering | tv | 9 days | 1 | -0/+5 |
| | | |||||
| * | api: allow auth delegation | tv | 9 days | 1 | -0/+22 |
| | | |||||
| * | add documentation | tv | 9 days | 1 | -0/+149 |
 |
index : continuum | |
| P2P replicated document storage service |
| aboutsummaryrefslogtreecommitdiffstats |