Andrew Martinez 703f74ae28 backport fixes GHSA-q8g9-jc4c-jp6q to v2.0 limit pre-auth request body buffering ...

- caps buffered HTTP request bodies at 1 MiB across the client, management, fabric management, and OIDC web APIs
- rejects oversized bodies with 413 REQUEST_ENTITY_TOO_LARGE before authentication
- surfaces request body read errors instead of ignoring them
- returns after writing the request context error response in the client API handler
- adds integration coverage for oversized bodies with and without Content-Length

2026-08-19 17:46:02 -04:00

..

resources

adds support OIDC authentication, api access, and ER connections

2023-07-20 09:41:12 -04:00

client.go

fixes #3788 return proper OIDC error codes and HTTP status codes (#3790)

2026-04-14 16:44:06 -04:00

config.go

Enforce api-session and identity revocations on the router. Fixes #3929

2026-06-24 15:42:01 -04:00

ctx.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

errors.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

issuer.go

fixes #2737 open-id config issuer mismatch (#2782)

2025-02-11 16:59:03 -05:00

key.go

Optimize imports

2026-01-28 15:01:35 -05:00

login.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

negotiate_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

negotiate.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

parse_test.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

parse.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

provider.go

backport fixes GHSA-q8g9-jc4c-jp6q to v2.0 limit pre-auth request body buffering

2026-08-19 17:46:02 -04:00

render.go

backport fixes GHSA-q8g9-jc4c-jp6q to v2.0 limit pre-auth request body buffering

2026-08-19 17:46:02 -04:00

requests.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

revocation_batcher.go

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

server.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

storage.go

Enforce api-session and identity revocations on the router. Fixes #3929

2026-06-24 15:42:01 -04:00

verify_test.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

verify.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00