sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-09-24 07:39:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Document that credentials are accepted only in a URL-encoded body

Browse Source
This commit is contained in:
Viktor Liu
2026-09-23 13:19:36 +02:00
parent 469973f59d
commit d01b6089c4
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
proxy/internal/auth/README.md
+5 -2
View File
@@ -1,7 +1,10 @@
# PIN and password authentication limits
PIN and password credentials are accepted only in a POST form body. Query-string
credentials and credentials on other HTTP methods are ignored.
PIN and password credentials are accepted only in a URL-encoded
(`application/x-www-form-urlencoded`) POST body. Query-string credentials,
multipart and other body encodings, and credentials on other HTTP methods are
ignored. The encoding is restricted because it is the one AppSec inspection can
redact before mirroring a request to the engine.
The proxy permits a burst of five credential checks per account and service,
then replenishes one check every six seconds (ten per minute). PIN and password