Spike Curtis 7c71053eab fix: stop leaking User into API handlers unless authorized ...

Fixes an issue where we extracted the `{user}` parameter from the URL and added it to the API Handler context regardless of whether the caller had permission to read the User.

2023-10-11 09:41:14 +04:00

..

patternmatcher

feat: allow external services to be authable (#9996)

2023-10-03 14:04:39 +00:00

actor_test.go

refactor(coderd/database): split Time and Now into dbtime package (#9482)

2023-09-01 16:50:12 +00:00

actor.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

apikey_test.go

feat(coderd): connect dbcrypt package implementation (#9523)

2023-09-07 15:49:49 +01:00

apikey.go

chore: enable exhaustruct linter for database param structs (#9995)

2023-10-03 09:23:45 +01:00

authorize_test.go

refactor(coderd/database): split Time and Now into dbtime package (#9482)

2023-09-01 16:50:12 +00:00

authz_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

authz.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

clitelemetry.go

refactor(coderd/telemetry): move CLI telemetry to cli/telemetry (#9517)

2023-09-04 21:42:45 +03:00

cors_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

cors.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

csp_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

csp.go

chore: CORs option for yarn dev server (#7630)

2023-05-22 20:02:39 +02:00

csrf.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

externalauthparam_test.go

chore: move /gitauth to /externalauth on the frontend (#9954)

2023-09-30 14:30:01 -05:00

externalauthparam.go

chore: move /gitauth to /externalauth on the frontend (#9954)

2023-09-30 14:30:01 -05:00

groupparam_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

groupparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

hsts_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

hsts.go

chore: enable exhaustruct linter (#8403)

2023-07-11 14:30:33 +01:00

httpmw_internal_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

httpmw.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

logger.go

feat(coderd/httpmw): log start timestamp for http requests (#9776)

2023-09-27 14:39:22 +03:00

oauth2_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

oauth2.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

organizationparam_test.go

chore: drop unused redirectToLoginOnMe parameter (#10164)

2023-10-10 16:13:00 +04:00

organizationparam.go

fix: stop leaking User into API handlers unless authorized

2023-10-11 09:41:14 +04:00

prometheus_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

prometheus.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

ratelimit_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

ratelimit.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

realip_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

realip.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

recover_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

recover.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

requestid_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

requestid.go

feat: add request_id to HTTP trace spans (#10145)

2023-10-09 14:05:10 -05:00

templateparam_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

templateparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

templateversionparam_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

templateversionparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

userparam_test.go

chore: drop unused redirectToLoginOnMe parameter (#10164)

2023-10-10 16:13:00 +04:00

userparam.go

fix: stop leaking User into API handlers unless authorized

2023-10-11 09:41:14 +04:00

workspaceagent_test.go

feat: integrate Acquirer for provisioner jobs (#9717)

2023-09-19 10:25:57 +04:00

workspaceagent.go

refactor(coderd): fetch owner information when authorizing workspace agent (#9123)

2023-08-21 15:49:26 +01:00

workspaceagentparam_test.go

feat: integrate Acquirer for provisioner jobs (#9717)

2023-09-19 10:25:57 +04:00

workspaceagentparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

workspacebuildparam_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

workspacebuildparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

workspaceparam_test.go

chore: drop unused redirectToLoginOnMe parameter (#10164)

2023-10-10 16:13:00 +04:00

workspaceparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

workspaceproxy_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

workspaceproxy.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

workspaceresourceparam_test.go

feat: integrate Acquirer for provisioner jobs (#9717)

2023-09-19 10:25:57 +04:00

workspaceresourceparam.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00