Chris LuandGitHub 5e8f99f40a filer: require admin-signed JWT on the IAM gRPC service (#9442) ...

Every IAM RPC (CreateUser, PutPolicy, CreateAccessKey, ...) now requires
a Bearer token in the authorization metadata, signed with the filer
write-signing key. The service refuses to register on a filer that has
no jwt.filer_signing.key set, so the unauthenticated default is gone:
operators who use these RPCs must configure the key and attach a token
on every call.

Bearer scheme matching is case-insensitive (RFC 6750), every handler
nil-checks req before dereferencing it, and tests now cover the
expired-token path.

2026-05-12 10:11:08 -07:00

..

credential.toml

migrate IAM policies to multi-file storage (#8114)

2026-01-26 11:28:23 -08:00

example.go

filer: add default log purging to master maintenance scripts (#8359)

2026-02-16 16:58:15 -08:00

filer.toml

filer(mysql): TLS hostname/SNI knobs + MariaDB upsert documentation (#9260)

2026-04-28 01:29:41 -07:00

master.toml

Disable master maintenance scripts when admin server runs (#8499)

2026-03-04 00:40:40 -08:00

notification.toml

notification.kafka: add SASL authentication and TLS support (#8832)

2026-03-29 13:45:54 -07:00

replication.toml

adding support for B2 region (#4177)

2023-02-05 21:24:21 -08:00

security.toml

filer: require admin-signed JWT on the IAM gRPC service (#9442)

2026-05-12 10:11:08 -07:00

shell.toml

shell: remove unused filer parameter from shell.toml

2022-07-07 15:01:23 -07:00