access-list: Hash basic-auth passwords and redact API reads #18

Merged
eva merged 2 commits from blake/sec-accesslist-hash into develop 2026-09-14 08:41:00 -05:00
2 changed files with 2 additions and 4 deletions
Showing only changes of commit 3087968463 - Show all commits
+1 -2
View File
@@ -1,11 +1,11 @@
package main
import (
"strings"
"encoding/json"
"log/slog"
"net/http"
"strconv"
"strings"
"helix-proxy/internal/auth"
"helix-proxy/internal/certificate"
@@ -1303,7 +1303,6 @@ func mountAPI(r chi.Router, st store.Store, eng *proxy.Engine, cm *certificate.M
})
}
func hashAccessListPasswords(al *store.AccessList) error {
for i := range al.Items {
pw := al.Items[i].Password
+1 -2
View File
@@ -1,11 +1,11 @@
package proxy
import (
"golang.org/x/crypto/bcrypt"
"context"
"crypto/tls"
"encoding/base64"
"fmt"
"golang.org/x/crypto/bcrypt"
"io"
"log/slog"
"net"
@@ -1252,7 +1252,6 @@ func parseAdvancedConfig(adv string) (reqSets map[string]string, respAdds map[st
return
}
func accessListPasswordOK(stored, provided string) bool {
if stored == "" {
return false