grafana/pkg/api/pluginproxy
Robbert Gurdeep Singh 034abaa73a
Security: Use Header.Set and Header.Del for X-Grafana-User header (#25495)
This ensures that the X-Grafana-User header can be trusted.
If the configuration enabled the setting of this header, the
server can now trust that X-Grafana-User is set/unset by Grafana.
Before this, an anonymous user could simply set the X-Grafana-User
header themselves (using the developer tool for example)
2020-06-11 21:15:17 +02:00
..
test-data dsproxy: allow multiple access tokens per datasource 2018-06-12 17:39:38 +02:00
access_token_provider_test.go dsproxy: adds support for url params for plugin routes (#23503) 2020-04-24 10:32:13 +02:00
access_token_provider.go pkg/api/pluginproxy: Access token provider should handle access tokens without ExpiresOn field (#19928) 2020-02-26 15:59:02 +01:00
ds_auth_provider_test.go Plugins: Support templated urls in routes (#16599) 2019-05-07 18:55:39 +02:00
ds_auth_provider.go dsproxy: adds support for url params for plugin routes (#23503) 2020-04-24 10:32:13 +02:00
ds_proxy_test.go Data sources: Don't fail if URL doesn't specify protocol (#24497) 2020-05-12 13:04:18 +02:00
ds_proxy.go Security: Use Header.Set and Header.Del for X-Grafana-User header (#25495) 2020-06-11 21:15:17 +02:00
pluginproxy_test.go dsproxy: adds support for url params for plugin routes (#23503) 2020-04-24 10:32:13 +02:00
pluginproxy.go Security: Use Header.Set and Header.Del for X-Grafana-User header (#25495) 2020-06-11 21:15:17 +02:00
utils_test.go Plugins: Support templated urls in routes (#16599) 2019-05-07 18:55:39 +02:00
utils.go Security: Use Header.Set and Header.Del for X-Grafana-User header (#25495) 2020-06-11 21:15:17 +02:00