Nicola Murino 8450c023ac httpd: apply pending auth requirements to API key routes ...

The admin API key routes now require any pending password change or
two-factor enrollment to be completed first, like the other admin routes.

Reported-by: Yves Soete, Blacksight LLC <yves.soete@blacksight.io>

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>

2026-10-03 12:59:28 +02:00

..

api_admin.go

dataprovider: refuse self-service writes made from a stale snapshot

2026-09-07 08:47:18 +02:00

api_configs.go

httpd: bind the OAuth2 token request to the browser that started it

2026-08-12 21:14:54 +02:00

api_defender.go

remove some premature optimizations

2026-06-08 12:56:38 +02:00

api_eventrule.go

JWT: replace jwtauth/jwx with lightweight wrapper around go-jose

2025-10-08 18:10:39 +02:00

api_events.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00

api_folder.go

JWT: replace jwtauth/jwx with lightweight wrapper around go-jose

2025-10-08 18:10:39 +02:00

api_group.go

JWT: replace jwtauth/jwx with lightweight wrapper around go-jose

2025-10-08 18:10:39 +02:00

api_http_user.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00

api_iplist.go

JWT: replace jwtauth/jwx with lightweight wrapper around go-jose

2025-10-08 18:10:39 +02:00

api_keys.go

JWT: replace jwtauth/jwx with lightweight wrapper around go-jose

2025-10-08 18:10:39 +02:00

api_maintenance.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00

api_mfa.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00

api_quota.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00

api_retention.go

JWT: replace jwtauth/jwx with lightweight wrapper around go-jose

2025-10-08 18:10:39 +02:00

api_role.go

JWT: replace jwtauth/jwx with lightweight wrapper around go-jose

2025-10-08 18:10:39 +02:00

api_shares.go

httpd: check the account state when a public share is served

2026-09-06 17:11:13 +02:00

api_user.go

JWT: replace jwtauth/jwx with lightweight wrapper around go-jose

2025-10-08 18:10:39 +02:00

api_utils.go

dataprovider: refuse self-service writes made from a stale snapshot

2026-09-07 08:47:18 +02:00

auth_utils.go

drop the dead nolint directives

2026-09-09 12:37:54 +02:00

file.go

fix error detection for HTTP and WebDAV uploads

2026-07-09 17:27:49 +02:00

flash_test.go

remove end year from Copyright notice in files

2024-01-01 11:31:45 +01:00

flash.go

remove end year from Copyright notice in files

2024-01-01 11:31:45 +01:00

handler.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00

httpd_test.go

httpd: apply pending auth requirements to API key routes

2026-10-03 12:59:28 +02:00

httpd.go

httpd: improvements to the static files handling

2026-08-31 21:15:05 +02:00

internal_test.go

drop the dead nolint directives

2026-09-09 12:37:54 +02:00

middleware.go

drop the dead nolint directives

2026-09-09 12:37:54 +02:00

oauth2_test.go

db shared sessions: set key and type as primary key

2025-03-23 11:34:10 +01:00

oauth2.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00

oidc_test.go

drop the dead nolint directives

2026-09-09 12:37:54 +02:00

oidc.go

oidc: add require_verified_email setting

2026-09-06 17:05:53 +02:00

oidcmanager.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00

resetcode.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00

resources_embedded.go

remove obsoletes build constraints

2025-04-20 17:15:40 +02:00

resources.go

remove obsoletes build constraints

2025-04-20 17:15:40 +02:00

server.go

httpd: apply pending auth requirements to API key routes

2026-10-03 12:59:28 +02:00

token.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00

web.go

modernize the codebase to current Go idioms

2026-07-13 20:52:29 +02:00

webadmin.go

dataprovider: refuse self-service writes made from a stale snapshot

2026-09-07 08:47:18 +02:00

webclient.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00

webtask_test.go

WebClient: refactor long-running tasks to improve browser compatibility

2024-03-11 18:19:57 +01:00

webtask.go

replace golangci-lint with staticcheck, errcheck and unparam

2026-08-24 15:07:16 +02:00