Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

http: add --public-url flag to replace various URL validation approaches #2421

Merged
merged 32 commits into from
Aug 3, 2022

Conversation

mastercactapus
Copy link
Member

Description:
This PR adds --public-url as a flag to replace the global General.PublicURL config and --http-prefix flag. When in use: request validation, auth redirects, and referer validation is all done based on the --public-url value. For support on multiple URLs, multiple instances of GoAlert can be run for each --public-url.

Which issue(s) this PR fixes:
Closes #2359

Screenshots:
Deprecated config values are now called out in the UI:
image

@Forfold Forfold self-requested a review June 16, 2022 21:18
Procfile.prod Show resolved Hide resolved
app/cmd.go Show resolved Hide resolved
auth/cookies.go Outdated Show resolved Hide resolved
auth/handler.go Outdated Show resolved Hide resolved
@m17ch m17ch requested a review from KatieMSB August 1, 2022 15:10
@mastercactapus mastercactapus merged commit d67c722 into master Aug 3, 2022
@mastercactapus mastercactapus deleted the strict-url-validation branch August 3, 2022 03:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

http: strict url handling
3 participants