Code

Allowed methods#444

Code

Merged

malud merged 16 commits intomastercoupergateway/couper:masterfrom allowed-methodscoupergateway/couper:allowed-methodsCopy head branch name to clipboardMar 21, 2022

+462-47

Commits

Commits on Mar 18, 2022

• AllowedMethodsHandler to check allowed methods (between access control and scope)

  

  Johannes Koch

  committed
  c8281aa

  Copy full SHA for c8281aa

• allowed_methods attribute for api and endpoint blocks

  

  Johannes Koch

  committed
  5925f15

  Copy full SHA for 5925f15

• wildcard for allowed_methods

  

  Johannes Koch

  committed
  1f9a130

  Copy full SHA for 1f9a130

• CORS preflight: Access-Control-Allow-Methods only set with requested method if method is allowed (per allowed_methods or default)

  

  Johannes Koch

  committed
  795370b

  Copy full SHA for 795370b

• Documentation for allowed_methods

  

  Johannes Koch

  committed
  d66ab23

  Copy full SHA for d66ab23

• changelog entry

  

  Johannes Koch

  committed
  9ee735b

  Copy full SHA for 9ee735b

• little bit shorter code

  

  Johannes Koch

  committed
  377dd8d

  Copy full SHA for 377dd8d

• moved config file

  

  Johannes Koch

  committed
  dc5068c

  Copy full SHA for dc5068c

• test cases for blocking request by not allowing any method

  

  Johannes Koch

  committed
  74e7686

  Copy full SHA for 74e7686

• test cases for invalid strings in allowed_methods

  

  Johannes Koch

  committed
  59907f8

  Copy full SHA for 59907f8

• upper-case methods only after regexp check

  

  Johannes Koch

  committed
  ba6f407

  Copy full SHA for ba6f407

• our own added operations (method/endpoint) must be allowed, no need to check method

  

  Johannes Koch

  committed
  181ba51

  Copy full SHA for 181ba51

• removed now unused MustAddRoute() and allowedMethods

  

  Johannes Koch

  committed
  afe942b

  Copy full SHA for afe942b

• don't allow TRACE, added test cases for CONNECT

  

  Johannes Koch

  committed
  6a2c606

  Copy full SHA for 6a2c606

• check methods at config load

  

  Johannes Koch

  committed
  60ea2f6

  Copy full SHA for 60ea2f6

Commits on Mar 21, 2022

• moved methodAllowed from CORS to CORSOptions

  

  Johannes Koch

  committed
  2057c5d

  Copy full SHA for 2057c5d