Nick Craig-Wood f191448b0d rc: flip auth default so all endpoints require auth unless opted out ...

Replace AuthRequired bool with NoAuth bool on the rc.Call struct and
flip the auth check logic. Previously endpoints were unauthenticated
by default and had to opt in with AuthRequired: true, which led to
security vulnerabilities when developers forgot to set the flag.

Now all endpoints require authentication by default. Only explicitly
safe read-only endpoints are marked with NoAuth: true:

- rc/noop
- rc/error
- rc/list
- core/version
- core/stats
- core/group-list
- core/transferred
- core/du
- cache/stats
- vfs/list
- vfs/stats
- vfs/queue
- job/status
- job/list

See GHSA-25qr-6mpr-f7qx, GHSA-jfwf-28xr-xw6q

2026-04-19 13:31:27 +01:00

..

test_vfs

build: modernize Go code with go fix for go1.25

2026-02-18 12:11:52 +00:00

vfscache

vfs: replace context.TODO/Background with stored VFS context

2026-04-13 12:48:38 +01:00

vfscommon

vfs: replace context.TODO/Background with stored VFS context

2026-04-13 12:48:38 +01:00

vfsflags

vfs: convert vfs options to new style

2024-07-15 11:09:54 +01:00

vfstest

vfs: add context parameter to New() for config propagation

2026-04-13 12:48:38 +01:00

dir_handle_test.go

test: replace defer cleanup with t.Cleanup

2022-12-09 14:38:05 +00:00

dir_handle.go

Spelling fixes

2020-10-14 15:21:31 +01:00

dir_test.go

vfs: make integration TestDirEntryModTimeInvalidation test more reliable

2025-07-06 14:35:16 +01:00

dir.go

vfs: replace context.TODO/Background with stored VFS context

2026-04-13 12:48:38 +01:00

errors_test.go

…

errors.go

vfs: add ELOOP error

2024-12-13 12:43:20 +00:00

file_test.go

vfs: add context parameter to New() for config propagation

2026-04-13 12:48:38 +01:00

file.go

vfs: replace context.TODO/Background with stored VFS context

2026-04-13 12:48:38 +01:00

make_open_tests.go

build: remove build constraint syntax for go 1.16 and older

2024-04-18 16:53:55 +02:00

open_test.go

…

rc_test.go

vfs: add context parameter to New() for config propagation

2026-04-13 12:48:38 +01:00

rc.go

rc: flip auth default so all endpoints require auth unless opted out

2026-04-19 13:31:27 +01:00

read_test.go

vfs: [bugfix] Implement Name() method in WriteFileHandle and ReadFileHandle

2023-10-06 14:08:20 +01:00

read_write_test.go

vfs: fix tests after --vfs-handle-caching

2026-04-07 23:27:25 +01:00

read_write.go

vfs: add symlink support to VFS

2024-12-13 12:43:20 +00:00

read.go

vfs: replace context.TODO/Background with stored VFS context

2026-04-13 12:48:38 +01:00

sighup_unsupported.go

vfs: fix SIGHUP killing serve instead of flushing directory caches

2025-09-01 13:15:11 +01:00

sighup.go

vfs: fix SIGHUP killing serve instead of flushing directory caches

2025-09-01 13:15:11 +01:00

vfs_case_test.go

vfs: add context parameter to New() for config propagation

2026-04-13 12:48:38 +01:00

vfs_test.go

vfs: add context parameter to New() for config propagation

2026-04-13 12:48:38 +01:00

vfs.go

vfs: add context parameter to New() for config propagation

2026-04-13 12:48:38 +01:00

vfs.md

docs: change syntax hightlighting for command examples from sh to console

2025-11-01 15:33:38 +01:00

vfstest_test.go

chore: fix function name in comment

2024-05-15 19:30:17 +01:00

vstate_string.go

vfs: fix virtual entries causing deleted files to still appear

2020-11-10 16:47:25 +00:00

write_test.go

vfs: [bugfix] Implement Name() method in WriteFileHandle and ReadFileHandle

2023-10-06 14:08:20 +01:00

write.go

vfs: replace context.TODO/Background with stored VFS context

2026-04-13 12:48:38 +01:00

zip_test.go

vfs: fix chunker integration test

2025-10-03 17:10:24 +01:00

zip.go

serve http: download folders as zip

2025-09-26 15:18:02 +01:00