opensource/kubo
1
0
Fork 0
mirror of https://github.com/ipfs/kubo.git synced 2025-08-24 19:27:14 +08:00
Code Issues Projects Releases Wiki Activity
14,473 Commits 155 Branches 202 Tags
Commit Graph

138 Commits

Author SHA1 Message Date
Kay
f12b372af9 style: gofumpt and godot [skip changelog] (#10081) 2023-08-17 14:02:08 +02:00
Henrique Dias
c6a59c9cc1 feat(tracing): use OTEL_PROPAGATORS as per OTel spec (#9801) 2023-04-06 16:36:15 +02:00
Jorropo
3ab1086f71 chore: migrate go-libipfs to boxo 
Resolves #9677, #9676, #9675, #9736
 2023-03-28 22:05:25 -04:00
Jorropo
1e3b6c9857 feat: add tracing to the commands client 2023-03-28 22:05:25 -04:00
Marcin Rataj
9dbc9dfeb2 fix(cmds): use kubo in CheckVersionOption 
Using both names to avoid dev problems during the transition from go-ipfs 0.13 to kubo 0.14
 2022-07-06 23:08:31 +02:00
Marcin Rataj
82467bc936 refactor: rename to kubo 2022-07-06 18:40:37 +02:00
Dave Justice
6774ef9dfd fix: allow ipfs-companion browser extension to access RPC API (#8690) 
* fix: add companion ids to allow origins

- fixes #8689
- Adds the chrome-extension ids for ipfs-companion and
ipfs-companion-beta to the allowed origins list, this
allows us to accesss ipfs api from a manifest v3 extension.
- added tests in t0401-api-browser-security.sh

* fix: companion when custom CORS *-Origin is set

Companion extension should be able to access RPC API even when custom
Access-Control-Allow-Origin is set

Co-authored-by: Marcin Rataj <lidel@lidel.org>
 2022-03-17 00:07:52 +01:00
Laurent Senta
8d549f03f3 fix: rewrite dependencies over the go-ipfs-config package 2022-03-04 09:45:16 +01:00
Marcin Rataj
d1c20bdff7 fix: localhost API access via ipv6 
This adds localhost ipv6 addresses to the allowlist for use in browser
context and fixes WebUI on ipv6-only deployments: http://[::1]:5001/webui

We were missing CORS/Origin tests for API port so I've added basic ones
and included localhost/127.0.0.1/::1 variants.
 2020-10-20 00:46:40 +02:00
Hector Sanjuan
1b490476e5 HTTP API: Disallow GET requests on API 
This commit upgrades go-ipfs-cmds and configures the commands HTTP API Handler
to only allow POST/OPTIONS, disallowing GET and others in the handling of
command requests in the IPFS HTTP API (where before every type of request
method was handled, with GET/POST/PUT/PATCH being equivalent).

The Read-Only commands that the HTTP API attaches to the gateway endpoint will
additional handled GET as they did before (but stop handling PUT,DELETEs).

By limiting the request types we address the possibility that a website
accessed by a browser abuses the IPFS API by issuing GET requests to it which
have no Origin or Referrer set, and are thus bypass CORS and CSRF protections.

This is a breaking change for clients that relay on GET requests against the
HTTP endpoint (usually :5001). Applications integrating on top of the
gateway-read-only API should still work (including cross-domain access).

Co-Authored-By: Steven Allen <steven@stebalien.com>
Co-Authored-By: Marcin Rataj <lidel@lidel.org>
 2020-04-05 09:57:57 +02:00
Steven Allen
a53d48059b fix: migrate from deprecated warning function 2020-01-28 21:20:21 -08:00
Steven Allen
5eea0a4ba0 http: use Method* constants 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2020-01-10 10:19:08 +01:00
Steven Allen
4924b80e10 chore: fix linter nits 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-05-14 09:38:26 -07:00
Jakub Sztandera
42e191c017 gx: unrewrite 
License: MIT
Signed-off-by: Jakub Sztandera <kubuxu@protonmail.ch>
 2019-03-05 18:33:56 +01:00
Steven Allen
3fa1bfe1bc gx: update cmds and flatfs 
fixes #6028, fixes crash when writing after closing on flatfs.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-03-01 12:17:49 -08:00
Steven Allen
f227862e88 gx: update go-ipfs-cmds, go-bitswap, go-libp2p-kad-dht, and go-mplex 
Fixes the latest batch of bugs found in RC testing.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-27 12:39:24 -08:00
Hector Sanjuan
6972a9aa4d Gx Bubble. libp2p-6.0.38 
License: MIT
Signed-off-by: Hector Sanjuan <code@hector.link>
 2019-02-27 01:10:59 +00:00
Steven Allen
3c2536dd81 gx: update go-ipfs-cmds 
fixes #6021

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-25 16:45:43 -07:00
Steven Allen
fea7ae727f gx: update go-cid 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-20 20:29:06 -08:00
Steven Allen
f924f57c61 gx: update go-bitswap and go-libp2p-kad-dht 
* go-bitswap: fix some race conditions.
* go-libp2p-kad-dht: fix a goroutine leak.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-20 17:19:54 -08:00
Steven Allen
2f17b951c2 gx: update deps 
* Updates go-ipfs-cmds to try to get the tests to pass on travis.
* While we're at it, fix duplicate gx deps.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-19 13:12:21 -08:00
Jakub Sztandera
28cf3de0f9 Update protobuf 
License: MIT
Signed-off-by: Jakub Sztandera <kubuxu@protonmail.ch>
 2019-02-18 20:46:22 +01:00
Steven Allen
cf0d4706e2 gx: update libp2p stuff 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-14 14:58:35 -08:00
Steven Allen
e97a60b073 gx: update go-ipfs-files 
fix compatibility issue with js-ipfs

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-11 10:48:58 -08:00
Steven Allen
2c93eeffc6 gx: update go-libp2p-peer 
Switch _back_ to the 0.4.18 style of peer IDs while we figure things out. See
https://github.com/libp2p/specs/issues/138.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-02-07 17:41:39 -08:00
Łukasz Magiera
7c2aa0e9a9 gx: update go-unixfs to propagate archive changes 
License: MIT
Signed-off-by: Łukasz Magiera <magik6k@gmail.com>
 2019-01-30 20:58:32 +01:00
Łukasz Magiera
53e55e3314 gx: update go-unixfs to 1.2.14 and go-bitswap to 1.1.21 
(and everything else...)

License: MIT
Signed-off-by: Łukasz Magiera <magik6k@gmail.com>
 2019-01-23 11:01:38 -08:00
Hector Sanjuan
ab270fbaa7 Bubble go-ipfs-cmds 2.0.10 
License: MIT
Signed-off-by: Hector Sanjuan <hector@protocol.ai>
 2019-01-10 21:31:11 +01:00
Steven Allen
08cc5da55f gx: update deps 
Importantly:

* fixes a bunch of MFS bugs
* pulls in some bitswap improvements

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-01-08 19:19:34 -08:00
Steven Allen
42a15ba7e4 Merge pull request #5893 from ipfs/fix/gateway-headers 
gateway: fix CORs headers
 2019-01-08 13:25:08 -08:00
Steven Allen
4bbf4cc9a0 gateway, api: canonicalize headers from user config 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-01-04 13:18:16 -08:00
Steven Allen
543be29796 api: let the CORs library handle CORs headers 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2019-01-04 11:18:24 -08:00
Łukasz Magiera
7b4ab36817 gx: update go-ipfs-config 
License: MIT
Signed-off-by: Łukasz Magiera <magik6k@gmail.com>
 2019-01-04 02:37:06 +01:00
Steven Allen
5894291139 gx: update go-ipfs-config 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-12-20 10:07:32 -08:00
Łukasz Magiera
0618fd77be gx: update go-ipfs-files to 2.0 
License: MIT
Signed-off-by: Łukasz Magiera <magik6k@gmail.com>
 2018-12-20 13:52:20 +01:00
Steven Allen
90926ca5c7 gx: update go-ipfs-cmds 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-12-12 16:35:42 -08:00
Steven Allen
9dcec2b3e2 gx: update go-libp2p-peer 
Reverts the changes that allowed small keys (ed25519 keys) to be inlined.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-12-07 15:37:23 -08:00
Kevin Atkinson
feb4808975 Gx update go-merkledag and related deps. 
License: MIT
Signed-off-by: Kevin Atkinson <k@kevina.org>
 2018-11-28 17:21:36 -05:00
Steven Allen
cef645936d gx: update go-ipfs-config 
* AutoRelay options for #5785.
* Badger truncate-by-default option for #5275, #5625.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-11-26 17:42:13 -08:00
hannahhoward
0963c9cdcb Update go-ipfs-delay and assoc deps 
License: MIT
Signed-off-by: hannahhoward <hannah@hannahhoward.net>
 2018-11-15 18:53:45 -08:00
Steven Allen
0d80fc54c3 gx: update go-log and sha256 
fixes #5709

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-11-02 21:17:20 -07:00
Steven Allen
ec9fac7379 gx: update go-ipld-cbor 
(might as well do this at the same time)

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-11-02 13:17:44 -07:00
Steven Allen
af53380e8c gx: update go-path 
fixes the changed path cat error causing the js-ipfs-api tests to fail

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-10-30 09:27:41 -07:00
Hector Sanjuan
ef7234d269 Bubble deps 
License: MIT
Signed-off-by: Hector Sanjuan <hector@protocol.ai>
 2018-10-29 18:49:37 +01:00
Dominic Della Valle
38cae95f30 gx: update go-ipfs-cmds to 2.0.5 
License: MIT
Signed-off-by: Dominic Della Valle <ddvpublic@gmail.com>
 2018-10-26 19:50:32 -04:00
Steven Allen
37f0fd92c7 gx: update go-ipfs-cmds 
(no code changes)

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-10-26 09:26:53 -07:00
Steven Allen
2b0bc7e084 configurable pubsub singing 
I'd like to sneak this into the release so we can turn on strict verification
ASAP.

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-10-26 04:00:44 -07:00
Steven Allen
e35d4ea58b gx: update yamux 
(fixes a panic due to a race)

License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-10-24 15:01:31 -07:00
Steven Allen
636bbc7e2b gx update go-libp2p 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-10-24 13:39:48 -07:00
Steven Allen
c97c3459be gx update 
License: MIT
Signed-off-by: Steven Allen <steven@stebalien.com>
 2018-10-24 09:59:43 -07:00