From 11113f3561802a3d79c59f5497a43e3fa10baa7c Mon Sep 17 00:00:00 2001 From: David Lougheed Date: Fri, 20 Dec 2024 13:03:54 -0500 Subject: [PATCH] chore!: remove Katsu auth exceptions no longer needed with authorized Katsu --- src/proxy_auth_v2.lua | 9 --------- 1 file changed, 9 deletions(-) diff --git a/src/proxy_auth_v2.lua b/src/proxy_auth_v2.lua index 336933f..799b5ca 100644 --- a/src/proxy_auth_v2.lua +++ b/src/proxy_auth_v2.lua @@ -60,15 +60,6 @@ if (req_method == "GET" or req_method == "OPTIONS") and ( uri == "/service-info" or -- any service-info endpoint; rewritten from original /api/.../service-info uri == "/workflows" or -- any workflow-providing endpoint; rewritten from original /api/.../workflows uri:sub(1, 11) == "/workflows/" or -- " - req_uri_no_qp:sub(1, 26) == "/api/metadata/api/projects" or - req_uri_no_qp:sub(1, 26) == "/api/metadata/api/datasets" or - req_uri_no_qp == "/api/metadata/api/public" or - req_uri_no_qp == "/api/metadata/api/public_overview" or - req_uri_no_qp == "/api/metadata/api/public_search_fields" or - req_uri_no_qp == "/api/metadata/api/public_rules" or - req_uri_no_qp == "/api/metadata/api/extra_properties_schema_types" or - req_uri_no_qp:sub(1, 26) == "/api/metadata/api/schemas/" or - req_uri_no_qp:sub(1, 24) == "/api/metadata/data-types" or req_uri_no_qp:sub(1, 24) == "/api/gohan/data-types" ) then -- Clear possible Katsu authorization injections for old remote user middleware