s1d3sw1ped/helix-proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

access-list: Hash basic-auth passwords and redact API reads #18

Merged
eva merged 2 commits from blake/sec-accesslist-hash into develop 2026-09-14 08:41:00 -05:00
Conversation 1 Commits 2 Files Changed 2
+76 -5

2 Commits

Author SHA1 Message Date
blake 3087968463 format: gofmt api.go and engine.go
Format / gofmt (pull_request) Successful in 19s
Details
Format / gofmt (push) Successful in 20s
Details
CI / Build (push) Successful in 29s
Details
CI / Build (pull_request) Successful in 31s
Details
CI / Go Tests (push) Successful in 1m12s
Details
CI / Go Tests (pull_request) Successful in 1m16s
Details
2026-09-14 13:38:52 +00:00
Blake 61c7b5582c access-list: Hash basic-auth passwords and redact API reads
Format / gofmt (pull_request) Failing after 15s
Details
Format / gofmt (push) Failing after 15s
Details
CI / Build (push) Successful in 36s
Details
CI / Build (pull_request) Successful in 37s
Details
CI / Go Tests (pull_request) Successful in 1m20s
Details
CI / Go Tests (push) Failing after 1m20s
Details 
Access-list item passwords were stored and returned in plaintext.
Hash on write with bcrypt, compare hashes in the proxy engine (with
legacy plaintext fallback), and omit passwords from admin GET JSON.
 2026-09-14 13:32:31 +00:00