Vadim Sabirov
8b2c77b107
Fix #1523 by adding SameSite mode for CSRF settings
2020-03-04 18:14:23 +03:00
Shinichi TAMURA
7c5af01350
Safer/trustable extraction of real ip from request ( #1478 )
...
* Safer/trustable extraction of real ip from request
* Fix x-real-ip handling on proxy
* fix docs
* fix default check
2020-02-24 08:29:34 -08:00
Dmitry Kutakov
712b5e46c5
format code (gofmt + trim trailing space) ( #1452 )
2020-01-25 09:48:53 -08:00
J. David Lowe
8d7f05e533
round-trip paramValues without exploding ( #1463 )
2020-01-23 18:32:17 -08:00
Shin Ohno
8b7220f97c
Fixed comment typo in BodyDump ( #1431 )
2019-10-30 17:34:27 -07:00
Vishal Rana
d286e285dc
Bumped v4.1.11
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2019-10-06 17:01:28 -07:00
Vishal Rana
05262e484a
Capture proxy middleware error
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2019-10-06 16:56:21 -07:00
Hylke Visser
87da9a948b
Add ReferrerPolicy to Secure middleware ( #1363 )
2019-08-01 15:27:09 -07:00
nattawitc
8cfaf50b8f
fix #1260 change middleware.Logger's default output ( #1336 )
...
* fix TestLoggerIPAddress reverse assertion
* change middleware.Logger default output
* remove nil field declaration
2019-07-17 21:34:31 -07:00
Tom Scholz
31361576e8
feat: Add a new ErrorHandlerWithContext ( #1328 )
...
* feat: Add a new ErrorHandlerWithContext
This commit adds a new error handler, which is passed the
current context, so that you can add custom redirects or even
other kinds of responses. For example:
```go
e.Use(middleware.JWTWithConfig(middleware.JWTConfig{
SigningKey: []byte("secret"),
TokenLookup: "query:token",
ErrorHandlerWithContext: func(err error, c echo.Context) error {
// do stuff with context and err
switch err.(type) {
case jwt.ValidationError:
return c.Redirect(http.StatusSeeOther, "/login")
}
return err
},
}))
```
* chore: address golint issues
2019-06-13 13:21:03 -07:00
ozburo
6b9408d1d1
Added param:<name> lookup option to JWT Middleware ( #1296 )
...
* Added lookup option to JWT Middleware
* Added param:<name> lookup option to JWT Middleware
2019-06-09 09:49:52 -07:00
Vishal Rana
842fc8772f
Fixed #1323
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2019-06-09 09:37:21 -07:00
Das Jott
e2671fe963
Provide possibility to use key ids ( #1289 )
...
* provide possibility to use key ids
* kid tests
2019-05-17 07:45:49 -07:00
Vishal Rana
4de244c072
Fixed invalid json value for error in logger middleware
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2019-04-29 13:21:11 -07:00
Vishal Rana
e53d9c516f
Updated deps and fixed a typo
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2019-04-27 22:32:29 -07:00
Hylke Visser
69bd47b35f
Fix flushing in Gzip middleware ( #1317 )
...
* Make Gzip response Writer also call Flush of underlying Writer
* Add unit test for chunked responses with Gzip
2019-04-16 15:52:06 -05:00
atsushi-ishibashi
1f6cc362cc
Set subdomains to AllowOrigins with wildcard ( #1301 )
...
* Set subdomains to AllowOrigins with wildcard
* Create IsSubDomain
* Avoid panic when pattern length smaller than domain length
* Change names, improve formula
2019-03-09 10:32:49 -08:00
Helen Hood
5434a5392f
Enable adding preload
tag to HSTS header ( #1247 )
2019-03-06 10:22:19 -08:00
Hemachandar
775b2eefec
Refactor DefaultProxyConfig Skipper & WebSocket Check in Context ( #1297 )
...
* refactor: default to DefaultProxyConfig.Skipper if not provided
* refactor: use strings library for websocket check
2019-03-02 10:43:23 -08:00
Kumar Harsh
802fb5bba6
feat(secure): support Content-Security-Policy-Report-Only header ( #1287 )
...
Closes #1283
2019-02-26 22:32:07 -08:00
Ronald Bell
5aec1b234f
www redirects are too broad ( #1274 )
2019-02-15 09:56:58 -08:00
Evgeniy Kulikov
88965757af
Simplify code of Add/Remove trailing slash and fix bug ( #1275 )
...
* Simplify code of Add/Remove trailing slash
- simplify code (more informative / understanding)
- assert collides with imported package name (in tests)
- fix unhandled errors
* add tests for https://github.com/labstack/echo/pull/1275#issuecomment-460467700
2019-02-07 09:49:51 -08:00
Alex Ungur
6d9e043284
Introduced Go module support as v4, removed obsolete CloseNotifier() mechanism
...
This reintroduces support for Go modules, as v4.
CloseNotifier() is removed as it has been obsoleted, see https://golang.org/doc/go1.11#net/http
It was already NOT working (not sending signals) as of 1.11 the functionality was gone, we merely
deleted the functions that exposed it. If anyone still relies on it they should migrate to using
`c.Request().Context().Done()` instead.
Closes #1268 , #1255
2019-01-30 16:11:42 +02:00
Aimee LaPlant
2195bd3670
Updated comment. ( #1245 )
2019-01-09 15:15:33 -08:00
skrassiev
3f8b45c8d0
balance double-quotes in json ( #1232 )
2018-12-05 08:13:48 -08:00
Vishal Rana
c54d9e8eed
Added user-agent to logger middleware
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2018-11-22 22:34:14 -08:00
Emir Ribić
c8fd197fa8
Replace http constants with stdlib ones, i.e.: http.MethodGet instead of echo.GET ( #1205 )
2018-10-14 20:46:58 +05:30
Emir Ribić
059c099762
simplify tests ( #1206 )
2018-10-14 12:48:44 +05:30
Vishal Rana
ac1f40118a
Proxy rename descr to desc
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2018-10-13 11:43:05 +05:30
Gregor Noczinski
bc37a3a792
Proxy: Better errors + remote custom TLS ( #1197 )
...
Proxy will be more verbose on errors + possibility to configure custom transport (example: for custom TLS certificates)
2018-10-13 11:40:19 +05:30
Artyom Turkin
fcdf096c2c
extend proxy middleware. closes #1202 ( #1203 )
...
* extend proxy middleware. closes #1202
2018-10-09 09:13:39 +05:30
Vishal Rana
90822319eb
Fixed test
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2018-08-28 20:49:22 -07:00
Marcin Węglarz
74f9806b34
Fix issue #1143 ( #1176 )
2018-08-15 07:35:27 -07:00
Vishal Rana
db8f5706fd
Closed #1121
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2018-07-17 23:21:54 -07:00
Kesus Kim
09dcba1d39
rename proto to protocol
2018-07-10 23:06:17 -07:00
Kesus Kim
2a5460328f
add test case for logger middleware
2018-07-10 23:06:17 -07:00
Kesus Kim
146100093e
add proto field for middleware
2018-07-10 23:06:17 -07:00
Vishal Rana
d8a6dad02d
[JWT] use local error handler for missing token
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2018-07-09 11:36:25 -07:00
Vishal Rana
ec7b497940
Fixed cors test
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2018-07-03 09:51:15 -07:00
Jean-Sébastien Ney
8203e48696
add a few tests
2018-07-03 09:45:12 -07:00
Jean-Sébastien Ney
d63824fa41
handle using withcredentials and allow origin * together
2018-07-03 09:45:12 -07:00
Vishal Rana
9b4cc60ce2
Added error to logger middleware
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2018-06-28 21:22:50 -07:00
Vishal Rana
61084e242e
JWT BeforeFunc, SuccessHandler & ErrorHandler
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2018-06-28 20:42:18 -07:00
Jeffrey Reuling (TI)
56091a4186
allow whitespace in regex
2018-06-26 09:57:59 -07:00
Vishal Rana
38f27e229c
Enhanced static browse
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2018-04-11 21:41:18 -07:00
Vishal Rana
5b769f91b2
HTTPError#Inner to HTTPError#Internal
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2018-04-10 12:06:31 -07:00
Alexandre Stein
37f1a470ef
Replace the redirection with a direct call to url package
2018-04-03 08:40:03 -07:00
Vishal Rana
a5d81b8d4a
Updated deps, removed json-iterator, fixed #1087 , fixed #1086
...
Signed-off-by: Vishal Rana <vr@labstack.com>
2018-03-16 10:00:59 -07:00
Florian Holzapfel
9aafcaf934
fix: BodyLimit middleware: limitedReader Reset does not reset read counter
2018-03-16 09:48:23 -07:00
Jeffrey Reuling (TI)
ee32e3e7fb
fix issue #1086
2018-03-16 09:47:05 -07:00