Andrew Martinez 0895b4ef2f backport fixes GHSA-q8g9-jc4c-jp6q to v1.6 limit pre-auth request body buffering ...

- caps buffered HTTP request bodies at 1 MiB across the client, management, fabric management, and OIDC web APIs
- rejects oversized bodies with 413 REQUEST_ENTITY_TOO_LARGE before authentication
- surfaces request body read errors instead of ignoring them
- ports the env.WriteHttpError and env.WriteHttpApiError helpers needed by the error paths
- adapts the CreateRequestContext signature change to the v1.6.x callers in AppEnv.IsAllowed and fabric-api-wrapper.go
- adds integration coverage for oversized bodies with and without Content-Length

2026-08-19 17:22:56 -04:00

..

appenv.go

backport fixes GHSA-q8g9-jc4c-jp6q to v1.6 limit pre-auth request body buffering

2026-08-19 17:22:56 -04:00

broker.go

fix #3178 apis missing from controllers (#3180)

2025-08-05 09:15:27 -04:00

context.go

backport fixes GHSA-q8g9-jc4c-jp6q to v1.6 limit pre-auth request body buffering

2026-08-19 17:22:56 -04:00

helpers.go

fixes #2796 generated clients for enrollment do not work (#2883)

2025-03-17 10:05:15 -04:00

producers.go

fixes #2796 generated clients for enrollment do not work (#2883)

2025-03-17 10:05:15 -04:00

routers.go

fixes #2796 generated clients for enrollment do not work (#2883)

2025-03-17 10:05:15 -04:00

sync.go

Update to channel/v4

2025-04-02 15:28:59 -04:00

trace.go

update CODEOWNERS to sig-core and update MM notifications

2022-11-30 14:34:10 -05:00