Alessandro RosandGitHub 85f57b90db stop accepting JWTs from query parameters unless allowed in conf (#5010) ...

This is the first step into removing support for JWTs in
query parameters, which is a security flaw.

2025-09-22 10:04:51 +02:00

..

credentials.go

support passing JWTs through the password field (#4516)

2025-05-10 22:54:24 +02:00

error.go

fix authentication failure reason not being displayed (#5007)

2025-09-22 09:48:51 +02:00

jwt_claims.go

support parsing JWT claims encoded as strings (#3696) (#4465)

2025-04-28 22:22:42 +02:00

manager_test.go

fix reading JWT when it is passed through the password field (#5009)

2025-09-22 10:00:33 +02:00

manager.go

stop accepting JWTs from query parameters unless allowed in conf (#5010)

2025-09-22 10:04:51 +02:00

request.go

allow disabling JWT in HTTP query parameters (#4518)

2025-05-11 10:21:08 +02:00