github-mirrors/VictoriaMetrics
1
0
Fork 0
mirror of https://github.com/VictoriaMetrics/VictoriaMetrics.git synced 2024-12-01 14:47:38 +00:00
Code Issues Projects Releases Packages Wiki Activity
VictoriaMetrics/app/vmauth
History
Nikolay f4c597da88
app/vmauth: add removeXFFHTTPHeaderValue flag 
Previously, there was no option to replace value of `X-Forwarded-For`
HTTP Header. It was only possible to completely remove it. It's not good
solution, since backend may require this information. But using direct
value of this header is insecure. And requires complex knowledge of
infrastruce at backend side (see spoofing X-Forwarded-For articles).

This commit adds new flag, that replaces content of `X-Forwarded-For`
HTTP Header value with current `RemoteAddress` of client that send
request.
It should be used if `vmauth` is directly attached to the internet.

 Related issue:
https://github.com/VictoriaMetrics/VictoriaMetrics/issues/6883

---------

Signed-off-by: f41gh7 <nik@victoriametrics.com>
2024-11-29 10:33:19 +01:00
..
deployment all: suppress InvalidDefaultArgInFrom warning emitted by docker build when building Docker packages via make package-* command 2024-09-03 14:05:43 +02:00
multiarch app/*/multiarch: return back empty value for TARGETARCH 2024-09-06 18:15:22 +02:00
auth_config.go app/vmauth: dump requests that failed the route rules to stderr (#7649) 2024-11-26 18:50:31 +01:00
auth_config_test.go app/vmauth: properly check for backend health before leastLoaded policy (#7489) 2024-11-08 17:07:54 +01:00
example_config.yml app/vmauth: adds metric_labels and backend_errors counter (#5585) 2024-01-22 01:09:51 +02:00
example_config_ent.yml vmauth: add browser authorization request for http requests without… (#5234) 2023-11-01 21:00:52 +01:00
main.go app/vmauth: add removeXFFHTTPHeaderValue flag 2024-11-29 10:33:19 +01:00
main_test.go app/vmauth: dump requests that failed the route rules to stderr (#7649) 2024-11-26 18:50:31 +01:00
Makefile Add build support for loong64 (#6222) 2024-05-10 14:32:05 +02:00
README.md all: replace old https://docs.victoriametrics.com/vmauth.html url with the new one - https://docs.victoriametrics.com/vmauth/ 2024-04-18 01:50:16 +02:00
target_url.go app/vmauth: follow-up for b155b20de4 2024-04-17 14:53:20 +02:00
target_url_test.go app/vmauth: properly inherit user-level options at url_map when url_prefix isnt set at the user level 2024-11-14 17:21:32 +01:00

README.md

See vmauth docs here.

vmauth docs can be edited at docs/vmauth.md.