sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-10-13 17:09:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

[proxy] Enforce per-target HTTP access actions (#8115)

Browse Source 
Apply target access before service authentication: inherit, bypass, or block. Keep route selection and auth decisions on the same snapshot; reject stale or unavailable required middleware.

Validation: full auth/proxy race tests and scoped lint passed. Runtime regression tests remain with this layer.
This commit is contained in:
Maycon Santos
2026-10-12 12:31:57 +02:00
committed by GitHub
parent a7a2575bad
commit 1161616c02
16 changed files with 2692 additions and 640 deletions
Download Patch File Download Diff File Expand all files Collapse all files
shared/management/proto/proxy_service.pb.go
+617 -546
View File
File diff suppressed because it is too large Load Diff
shared/management/proto/proxy_service.proto
+7
View File
@@ -105,6 +105,12 @@ enum PathRewriteMode {
PATH_REWRITE_PRESERVE = 1;
}
enum TargetAccessAction {
TARGET_ACCESS_ACTION_INHERIT = 0;
TARGET_ACCESS_ACTION_BYPASS = 1;
TARGET_ACCESS_ACTION_BLOCK = 2;
}
message PathTargetOptions {
bool skip_tls_verify = 1;
google.protobuf.Duration request_timeout = 2;
@@ -178,6 +184,7 @@ message PathMapping {
string path = 1;
string target = 2;
PathTargetOptions options = 3;
TargetAccessAction access_action = 4;
}
message HeaderAuth {