3 Commits

Include renames

Author	SHA1	Message	Date
Chris LuandGitHub	05ed5c9ae8	filer: scope JWT allowed_prefixes to path components (#9439) ... The allowed_prefixes check used a literal byte-prefix match, so a token scoped to /tenant1 also matched /tenant1234, /tenant1-old, and similar sibling paths. Match on /-separated path components after path.Clean normalisation instead.	2026-05-12 10:10:48 -07:00
Chris LuandGitHub	6940b7d06e	fix Filer startup failure due to JWT on / path #8149 (#8167) ... * fix Filer startup failure due to JWT on / path #8149 - Comment out JWT keys in security.toml.example - Revert Dockerfile.local change that enabled security by default - Exempt GET/HEAD on / from JWT check for health checks * refactor: simplify JWT bypass condition as per PR feedback	2026-01-29 21:45:15 -08:00
Chris LuandGitHub	1046bd009a	feat: Optional path-prefix and method scoping for Filer HTTP JWT (#8014) ... * Implement optional path-prefix and method scoping for Filer HTTP JWT * Fix security vulnerability and improve test error handling * Address PR feedback: replace debug logging and improve tests * Use URL.Path in logs to avoid leaking query params	2026-01-12 13:21:48 -08:00