Steven Masley 24080b121c feat: enable csrf token header (#11283) ...

* feat: enable csrf token header

* Exempt external auth requets
* ensure dev server bypasses CSRF
* external auth is just get requests
* Add some more routes
* Extra assurance nothing breaks

2023-12-19 15:42:05 -06:00

..

patternmatcher

feat: allow external services to be authable (#9996)

2023-10-03 14:04:39 +00:00

actor_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

actor.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

apikey_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

apikey.go

fix: redirect unauthorized git users to login screen (#10995)

2023-12-07 09:19:31 -05:00

authorize_test.go

refactor(coderd/database): split Time and Now into dbtime package (#9482)

2023-09-01 16:50:12 +00:00

authz_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

authz.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

clitelemetry.go

refactor(coderd/telemetry): move CLI telemetry to cli/telemetry (#9517)

2023-09-04 21:42:45 +03:00

cors_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

cors.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

csp_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

csp.go

chore: CORs option for yarn dev server (#7630)

2023-05-22 20:02:39 +02:00

csrf.go

feat: enable csrf token header (#11283)

2023-12-19 15:42:05 -06:00

externalauthparam_test.go

chore: move /gitauth to /externalauth on the frontend (#9954)

2023-09-30 14:30:01 -05:00

externalauthparam.go

chore: move /gitauth to /externalauth on the frontend (#9954)

2023-09-30 14:30:01 -05:00

groupparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

groupparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

hsts_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

hsts.go

chore: enable exhaustruct linter (#8403)

2023-07-11 14:30:33 +01:00

httpmw_internal_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

httpmw.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

logger.go

feat(coderd/httpmw): log start timestamp for http requests (#9776)

2023-09-27 14:39:22 +03:00

oauth2_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

oauth2.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

organizationparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

organizationparam.go

fix: stop leaking User into API handlers unless authorized

2023-10-11 09:41:14 +04:00

prometheus_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

prometheus.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

ratelimit_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

ratelimit.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

realip_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

realip.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

recover_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

recover.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

requestid_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

requestid.go

feat: add request_id to HTTP trace spans (#10145)

2023-10-09 14:05:10 -05:00

templateparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

templateparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

templateversionparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

templateversionparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

userparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

userparam.go

fix: stop leaking User into API handlers unless authorized

2023-10-11 09:41:14 +04:00

workspaceagent_test.go

feat: integrate Acquirer for provisioner jobs (#9717)

2023-09-19 10:25:57 +04:00

workspaceagent.go

refactor(coderd): fetch owner information when authorizing workspace agent (#9123)

2023-08-21 15:49:26 +01:00

workspaceagentparam_test.go

fix: lower amount of cached timezones for deployment daus (#11196)

2023-12-13 16:50:29 -06:00

workspaceagentparam.go

chore: correct 500 -> 404 on workspace agent mw (#11129)

2023-12-12 15:14:32 -06:00

workspacebuildparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

workspacebuildparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

workspaceparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

workspaceparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

workspaceproxy_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

workspaceproxy.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

workspaceresourceparam_test.go

chore: rename dbfake to dbmem (#10432)

2023-10-30 17:42:20 +00:00

workspaceresourceparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00