coosld/kubo
1
0
Fork 0
mirror of https://github.com/ipfs/kubo.git synced 2026-02-22 02:47:48 +08:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity
12,021 Commits 160 Branches 212 Tags 122 MiB
fd01acdfc0
Commit Graph

62 Commits

Author SHA1 Message Date
Peter Rabbitson
90a573354a Upgrade graphsync deps 2020-08-17 12:23:59 +02:00
Will Scott
a61132efea chore: update test deps for graphsync 2020-07-07 18:30:43 -04:00
Adin Schmahmann
faa0200cfa updated deps 2020-07-07 17:16:58 -04:00
Petar Maymounkov
e1a3b79514 ok 2020-07-07 11:16:27 -07:00
Petar Maymounkov
3121689d9a updating mods 2020-07-07 09:00:55 -07:00
Hector Sanjuan
1b490476e5 HTTP API: Disallow GET requests on API 
This commit upgrades go-ipfs-cmds and configures the commands HTTP API Handler
to only allow POST/OPTIONS, disallowing GET and others in the handling of
command requests in the IPFS HTTP API (where before every type of request
method was handled, with GET/POST/PUT/PATCH being equivalent).

The Read-Only commands that the HTTP API attaches to the gateway endpoint will
additional handled GET as they did before (but stop handling PUT,DELETEs).

By limiting the request types we address the possibility that a website
accessed by a browser abuses the IPFS API by issuing GET requests to it which
have no Origin or Referrer set, and are thus bypass CORS and CSRF protections.

This is a breaking change for clients that relay on GET requests against the
HTTP endpoint (usually :5001). Applications integrating on top of the
gateway-read-only API should still work (including cross-domain access).

Co-Authored-By: Steven Allen <steven@stebalien.com>
Co-Authored-By: Marcin Rataj <lidel@lidel.org>
 2020-04-05 09:57:57 +02:00
Steven Allen
a68c1af938 ci: update to go 1.14 2020-03-08 22:00:26 -07:00
Steven Allen
585731074e test(graphsync): test server-side graphsync 2020-02-26 09:11:17 -08:00
Steven Allen
67da056908 test(sharness): improve reliability of ma-pipe-unidir 
Write the PID file after listening.
 2019-10-28 21:54:47 -07:00
Steven Allen
460c2119e4 daemon: support unix domain sockets for the API/gateway 
All the work was client-side. Unix domain socket multiaddrs already worked
server-side.

fixes #4218
 2019-09-30 17:21:28 -07:00
Steven Allen
315a3c9e48 build: fix golangci again 
The patches that required the replace directives have been merged upstream.
Unfortunately, those branches have now been deleted, breaking the build.

GAH!
 2019-09-12 13:56:35 -07:00
Steven Allen
a8fbd066d7 make: move all test deps to a separate module 
1. This means those deps don't get pulled in unless we actually need to test.
2. It means we can cordon all the golangci-lint module replace hacks off into a
   separate package.
 2019-09-11 11:43:50 -07:00
Steven Allen
1de768fb8f fix: require gmake 
IPFS doesn't build correctly under non-GNU make implementations.
 2019-08-01 12:18:56 -07:00
Steven Allen
037382239d build: switch from megacheck to golangci-lint 
(which includes megacheck)

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-05-14 09:38:29 -07:00
Steven Allen
1f293eff1b chore: fix a bunch of issues caught by golangci-lint 
Most of these are probably harmless but a few looked like they might actually be
bugs. Most of them are just faulty tests.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-03-29 11:57:45 +00:00
Jakub Sztandera
061128d1d3 mk: fix make install by not setting GOBIN 
License: MIT
Signed-off-by: Jakub Sztandera <kubuxu@protonmail.ch>
 2019-03-06 22:21:14 +01:00
Jakub Sztandera
c21b7f91bc mk: remove json-to-junit program 
License: MIT
Signed-off-by: Jakub Sztandera <kubuxu@protonmail.ch>
 2019-03-05 18:38:47 +01:00
Jakub Sztandera
88030561c7 gomod: fix import path 
License: MIT
Signed-off-by: Jakub Sztandera <kubuxu@protonmail.ch>
 2019-03-05 18:33:58 +01:00
Jakub Sztandera
93c75321fb make: Replace json-to-junit with gotestsum 
License: MIT
Signed-off-by: Jakub Sztandera <kubuxu@protonmail.ch>

License: MIT
Signed-off-by: Jakub Sztandera <kubuxu@protonmail.ch>
 2019-03-05 18:33:58 +01:00
Jakub Sztandera
08062ecfe9 gomod: define sharness testing dependencies 
License: MIT
Signed-off-by: Jakub Sztandera <kubuxu@protonmail.ch>
 2019-03-05 18:33:58 +01:00
Jakub Sztandera
42e191c017 gx: unrewrite 
License: MIT
Signed-off-by: Jakub Sztandera <kubuxu@protonmail.ch>
 2019-03-05 18:33:56 +01:00
Steven Allen
f227862e88 gx: update go-ipfs-cmds, go-bitswap, go-libp2p-kad-dht, and go-mplex 
Fixes the latest batch of bugs found in RC testing.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-27 12:39:24 -08:00
Hector Sanjuan
b83376afe1 Fix a problem with go-libp2p-kad-dht 
License: MIT
Signed-off-by: Hector Sanjuan <code@hector.link>
 2019-02-27 05:30:15 +00:00
Hector Sanjuan
6972a9aa4d Gx Bubble. libp2p-6.0.38 
License: MIT
Signed-off-by: Hector Sanjuan <code@hector.link>
 2019-02-27 01:10:59 +00:00
Steven Allen
fea7ae727f gx: update go-cid 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-20 20:29:06 -08:00
Steven Allen
f924f57c61 gx: update go-bitswap and go-libp2p-kad-dht 
* go-bitswap: fix some race conditions.
* go-libp2p-kad-dht: fix a goroutine leak.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-20 17:19:54 -08:00
Jakub Sztandera
28cf3de0f9 Update protobuf 
License: MIT
Signed-off-by: Jakub Sztandera <kubuxu@protonmail.ch>
 2019-02-18 20:46:22 +01:00
Steven Allen
cf0d4706e2 gx: update libp2p stuff 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-14 14:58:35 -08:00
Steven Allen
2c93eeffc6 gx: update go-libp2p-peer 
Switch _back_ to the 0.4.18 style of peer IDs while we figure things out. See
https://github.com/libp2p/specs/issues/138.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-07 17:41:39 -08:00
Steven Allen
08cc5da55f gx: update deps 
Importantly:

* fixes a bunch of MFS bugs
* pulls in some bitswap improvements

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-01-08 19:19:34 -08:00
Łukasz Magiera
7b4ab36817 gx: update go-ipfs-config 
License: MIT
Signed-off-by: Łukasz Magiera <magik6k@gmail.com>
 2019-01-04 02:37:06 +01:00
Steven Allen
5894291139 gx: update go-ipfs-config 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-12-20 10:07:32 -08:00
Steven Allen
9dcec2b3e2 gx: update go-libp2p-peer 
Reverts the changes that allowed small keys (ed25519 keys) to be inlined.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-12-07 15:37:23 -08:00
Steven Allen
cef645936d gx: update go-ipfs-config 
* AutoRelay options for #5785.
* Badger truncate-by-default option for #5275, #5625.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-11-26 17:42:13 -08:00
hannahhoward
0963c9cdcb Update go-ipfs-delay and assoc deps 
License: MIT
Signed-off-by: hannahhoward <hannah@hannahhoward.net>
 2018-11-15 18:53:45 -08:00
Steven Allen
0d80fc54c3 gx: update go-log and sha256 
fixes #5709

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-11-02 21:17:20 -07:00
Travis Person
fcf1043683 Update iptb and iptb-plugins 
License: MIT
Signed-off-by: Travis Person <travis@protocol.ai>
 2018-11-01 19:46:06 -07:00
Travis Person
be3fc3e791 Update for plugins split 
License: MIT
Signed-off-by: Travis Person <travis@protocol.ai>
 2018-11-01 19:34:05 -07:00
Travis Person
e68c10abf4 Add iptb dep 
License: MIT
Signed-off-by: Travis Person <travis@protocol.ai>
 2018-11-01 19:33:07 -07:00
Łukasz Magiera
23ddc26025 ci: Coverage and Junit xmls in one run 
License: MIT
Signed-off-by: Łukasz Magiera <magik6k@gmail.com>
 2018-10-29 18:44:49 +01:00
Steven Allen
c97c3459be gx update 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-10-24 09:59:43 -07:00
Steven Allen
3eba14aa24 gx update 
Updates:

* go-kad-dht: Query performance improvements, DHT client fixes, validates
  records on *local* put.
* go-libp2p-swarm/go-libp2p-transport: Timeout improvements.
* go-multiaddr-net: Exposes useful Conn methods (CloseWrite, CloseRead, etc.)
* go-log: fixes possible panic when enabling/disabling events.
* go-multiaddr: fixes possible panic when stringifying malformed multiaddrs,
  adds support for consuming /p2p/ multiaddrs.

fixes #5113
unblocks #4895

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-06-26 17:11:33 -07:00
Steven Allen
85acad9a01 gx update go-log, sys, go-crypto 
* go-log
* sys
* go-crypto

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-06-08 22:36:24 -07:00
Steven Allen
39f927aa04 update gx imports 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-06-05 23:55:08 -07:00
Łukasz Magiera
221652fcfb fix govet warnings 
License: MIT
Signed-off-by: Łukasz Magiera <magik6k@gmail.com>
 2018-03-22 17:31:22 +01:00
Steven Allen
fe8846fcd7 gx: mass update 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-01-24 15:58:44 -08:00
Steven Allen
dfe7ef4fcf gx: update go-multihash 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2017-12-14 13:09:51 -08:00
Jeromy
cccc6a94a3 update go-multihash and bubble up changes 
License: MIT
Signed-off-by: Jeromy <jeromyj@gmail.com>
 2017-07-11 19:27:43 -07:00
Łukasz Magiera
043aa5f308 PTP API: Address review comments 
License: MIT
Signed-off-by: Łukasz Magiera <magik6k@gmail.com>
 2017-06-07 19:51:44 +02:00
Łukasz Magiera
69d3e08776 Corenet API: Some more tests 
License: MIT
Signed-off-by: Łukasz Magiera <magik6k@gmail.com>
 2017-05-31 11:33:17 +02:00