myxce/src/frontend/apiserver
Rongsong Shen 387a421c57
fix(apiserver): match JWT-excluded paths exactly, wildcard only for /* (bug-1962)
Cause: isExcludedPath (middleware/validatehandler.go) dropped the last
character of every excluded entry and prefix-matched, so /ping excused any
path starting with /pin (e.g. /pinX) from JWT validation, while
/swagger/*any (trimmed to /swagger/*an) never matched.

Fix: entries match exactly; an entry whose last segment is a gin catch-all
(/swagger/*any) matches any path under the part before the "*".

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-10 10:37:52 +00:00
..
backend fix(worker): graceful job kill and catchable stop, as LSF (bug-1957) 2026-10-10 10:00:36 +00:00
cmd fix(apiserver): bcrypt passwords and default-credential warnings in config-file auth (bug-1947) 2026-10-10 08:58:19 +00:00
common style(frontend): gofmt the apiserver and xcecli sources 2026-10-02 09:33:16 +00:00
config fix(apiserver): validate, default and document job.terminate_interval (bug-1957) 2026-10-10 10:04:47 +00:00
controllers fix(apiserver): stop ControlHost after validateHost rejects the request (bug-1961) 2026-10-10 10:37:52 +00:00
docs Merge Go frontend (apiserver + xcecli) into meson build 2026-04-14 11:23:18 +08:00
middleware fix(apiserver): match JWT-excluded paths exactly, wildcard only for /* (bug-1962) 2026-10-10 10:37:52 +00:00
models docs: document graceful job kill/stop and job.terminate_interval (bug-1957) 2026-10-10 10:07:42 +00:00
router fix(apiserver): trust X-Forwarded-For only from configured proxies (bug-1948) 2026-10-10 08:58:20 +00:00
services fix(apiserver): an accepted job is in the job store at once (bug-1894) 2026-09-30 04:23:10 +00:00
store fix(apiserver): enforce self_ug job scopes and accept project filters (bug-1934, bug-1935) 2026-10-10 06:56:57 +00:00
tools/encrypt fix(apiserver): bcrypt passwords and default-credential warnings in config-file auth (bug-1947) 2026-10-10 08:58:19 +00:00
utils fix(apiserver): validate, default and document job.terminate_interval (bug-1957) 2026-10-10 10:04:47 +00:00
vendor fix(apiserver): bcrypt passwords and default-credential warnings in config-file auth (bug-1947) 2026-10-10 08:58:19 +00:00
go.mod fix(apiserver): bcrypt passwords and default-credential warnings in config-file auth (bug-1947) 2026-10-10 08:58:19 +00:00
go.sum Merge Go frontend (apiserver + xcecli) into meson build 2026-04-14 11:23:18 +08:00
meson.build feat(eliminate-frontend-makefile): task 1.1 - Meson backend CGO test target 2026-09-03 13:17:06 +00:00
README.md Merge Go frontend (apiserver + xcecli) into meson build 2026-04-14 11:23:18 +08:00

(1) run server command:

cd cmd go run main.go

(2) run server with different log level: cd cmd go run main.go -level=debug

level options: info/debug/warn/error/fatal