Andrew Martinez 472b32c668 fixes GHSA-q8g9-jc4c-jp6q limit pre-auth request body buffering ...

- caps buffered HTTP request bodies at 1 MiB across the client, management, fabric management, and OIDC web APIs
- rejects oversized bodies with 413 REQUEST_ENTITY_TOO_LARGE before authentication
- surfaces request body read errors instead of ignoring them
- returns after writing the request context error response in the client API handler
- adds integration coverage for oversized bodies with and without Content-Length

2026-07-23 17:04:43 -04:00

..

api.go

Optimize imports

2026-01-28 15:01:35 -05:00

body_limit.go

fixes GHSA-q8g9-jc4c-jp6q limit pre-auth request body buffering

2026-07-23 17:04:43 -04:00

context.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

cors.go

Optimize imports

2026-01-28 15:01:35 -05:00

json_fields.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

responder.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

timeouts.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00