Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow disabling xsrf protection per an endpoint #58717

Merged
merged 15 commits into from
Mar 3, 2020
Merged

Allow disabling xsrf protection per an endpoint #58717

merged 15 commits into from
Mar 3, 2020

Commits on Feb 27, 2020

  1. add xsrfRequired flag to a route definition interface

    @mshustov
    mshustov committed Feb 27, 2020
    Configuration menu
    Copy the full SHA
    40a6419 View commit details
    Browse the repository at this point in the history

  2. update tests

    @mshustov
    mshustov committed Feb 27, 2020
    Configuration menu
    Copy the full SHA
    6b3b447 View commit details
    Browse the repository at this point in the history

  3. deprecate server.xsrf.whitelist 

    It meant to be used for IdP endpoints only, which we are going to refactor to disable xsrf requirement per a specific endpoint.
    @mshustov
    mshustov committed Feb 27, 2020
    Configuration menu
    Copy the full SHA
    b466852 View commit details
    Browse the repository at this point in the history

  4. update docs

    @mshustov
    mshustov committed Feb 27, 2020
    Configuration menu
    Copy the full SHA
    263689d View commit details
    Browse the repository at this point in the history

  5. do not fail on manual KibanaRequest creation

    @mshustov
    mshustov committed Feb 27, 2020
    Configuration menu
    Copy the full SHA
    a8b9f09 View commit details
    Browse the repository at this point in the history

Commits on Feb 28, 2020

  1. address comments

    @mshustov
    mshustov committed Feb 28, 2020
    Configuration menu
    Copy the full SHA
    081527c View commit details
    Browse the repository at this point in the history

  2. Merge branch 'master' into issue-53823-xsrf-per-router

    @mshustov
    mshustov committed Feb 28, 2020
    Configuration menu
    Copy the full SHA
    5d4a98b View commit details
    Browse the repository at this point in the history

  3. Merge branch 'master' into issue-53823-xsrf-per-router

    @mshustov
    mshustov committed Feb 28, 2020
    Configuration menu
    Copy the full SHA
    3411fb1 View commit details
    Browse the repository at this point in the history

  4. update tests

    @mshustov
    mshustov committed Feb 28, 2020
    Configuration menu
    Copy the full SHA
    5e54a83 View commit details
    Browse the repository at this point in the history

Commits on Mar 2, 2020

  1. Merge branch 'master' into issue-53823-xsrf-per-router

    @mshustov
    mshustov committed Mar 2, 2020
    Configuration menu
    Copy the full SHA
    7fcf2c8 View commit details
    Browse the repository at this point in the history

  2. address comments

    @mshustov
    mshustov committed Mar 2, 2020
    Configuration menu
    Copy the full SHA
    016f664 View commit details
    Browse the repository at this point in the history

Commits on Mar 3, 2020

  1. Merge branch 'master' into issue-53823-xsrf-per-router

    @mshustov
    mshustov committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    3868f71 View commit details
    Browse the repository at this point in the history

  2. make xsrfRequired available only for destructive methods

    @mshustov
    mshustov committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    07d7248 View commit details
    Browse the repository at this point in the history

  3. update docs

    @mshustov
    mshustov committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    e7829d9 View commit details
    Browse the repository at this point in the history

  4. another isSafeMethod usage

    @mshustov
    mshustov committed Mar 3, 2020
    Configuration menu
    Copy the full SHA
    a5c12a8 View commit details
    Browse the repository at this point in the history