Commit Graph

3124 Commits

Author SHA1 Message Date
homeward
2b7bcf0034
docs: fix error link (#6989) 2022-05-07 10:22:14 +08:00
Naveen
00cc4386ee
chore: Set permissions for GitHub actions (#6986)
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-05-07 10:21:45 +08:00
LetsGO
382e710e99
feat: just change uri args or headers when hiding credentials (#6991)
Co-authored-by: Alex Zhang <tokers@apache.org>
2022-05-07 10:20:51 +08:00
韩振方
6edd108cf6
docs: sync Chinese version FAQ docs (#6736)
Co-authored-by: homeward <97138894+hf400159@users.noreply.github.com>
Co-authored-by: Qi Guo <979918879@qq.com>
Co-authored-by: 琚致远 <juzhiyuan@apache.org>
Co-authored-by: 罗泽轩 <spacewanderlzx@gmail.com>
2022-05-07 10:15:56 +08:00
$udam
2800a06f00
docs: update plugin concept link in README (#6881)
Co-authored-by: homeward <97138894+hf400159@users.noreply.github.com>
2022-05-06 15:23:25 +08:00
Navendu Pottekkat
d7e49c91ea
docs: update "Installation" guide (#6964)
Signed-off-by: Navendu Pottekkat <navendupottekkat@gmail.com>
2022-05-05 18:17:50 +08:00
罗泽轩
b7bb40fa22
perf: avoid rematching SSL when our customized Nginx is used (#6970)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-05-05 14:12:26 +08:00
kwanhur
32a8b8f6ba
feat(redirect): set redirect server port when enable http_to_https (#6686)
Signed-off-by: kwanhur <huang_hua2012@163.com>
Co-authored-by: 罗泽轩 <spacewanderlzx@gmail.com>
2022-05-05 14:00:31 +08:00
罗泽轩
ea3828afef
feat(redis): support pipeline (#6959)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-05-05 10:46:01 +08:00
smile-luobin
f78d045983
fix-docs: fix error in doc of request-validation plugin (#6943)
Signed-off-by: smile-luobin <luobin_smile@163.com>
2022-05-05 10:02:50 +08:00
tzssangglass
3b7e3fde05
feat(stream): port syslog plugin (#6953) 2022-05-05 10:02:36 +08:00
soulbird
8f1006e97a
chore: remove redundant code (#6967)
* chore: delete REWRITTEN_BY_EXT_PLUGIN

* remove blank line

Co-authored-by: soulbird <zhaothreee@gmail.com>
Co-authored-by: soulbird <zhaothree@gmail.com>
2022-05-05 09:59:31 +08:00
罗泽轩
60e0ad6515
feat(xRPC): support timeout (#6965)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-05-05 09:59:12 +08:00
leslie
bd9f900023
fix: hide 5xx error message from client (#6982)
Co-authored-by: 高亮亮 <gll287546@alibaba-inc.com>
2022-05-05 09:54:20 +08:00
kwanhur
6704a02ffe
refactor(ops): penlight path instead of shell command mkdir (#6980)
Signed-off-by: kwanhur <huang_hua2012@163.com>
2022-05-05 09:53:41 +08:00
罗泽轩
cc88a8db0b
fix: upgrade lua-resty-etcd to 1.6.2 (#6892)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-04-29 17:06:00 +08:00
罗泽轩
adc643707d
ci: use wildcard to protect branches (#6966)
See https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/defining-the-mergeability-of-pull-requests/managing-a-branch-protection-rule#about-branch-protection-rules

Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-04-29 15:19:09 +08:00
Navendu Pottekkat
df17bbbd41
docs: update "Getting started" guide (#6929)
Signed-off-by: Navendu Pottekkat <navendupottekkat@gmail.com>
2022-04-29 14:19:16 +08:00
罗泽轩
c80a4959f9
docs(xRPC): add the main entry (#6956)
Co-authored-by: 琚致远 <juzhiyuan@apache.org>
Co-authored-by: tzssangglass <tzssangglass@gmail.com>
2022-04-29 14:12:46 +08:00
罗泽轩
1c90490d71
test: add client mTLS test for vanilla OpenResty (#6951)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-04-29 11:03:12 +08:00
homeward
4afc8a7fbf
docs: fix plugin document's format and contents (#6957) 2022-04-28 16:03:38 +08:00
homeward
353e10b60e
docs: fix code block format in jwt-auth doc (#6955) 2022-04-28 14:05:52 +08:00
soulbird
a545de5e33
fix: allow apisix start when open file descriptors unlimited (#6952)
Co-authored-by: soulbird <zhaothreee@gmail.com>
2022-04-28 11:58:47 +08:00
Navendu Pottekkat
0c82673414
docs: update "Security" docs (#6911) 2022-04-28 11:57:46 +08:00
soulbird
a06560ff35
chore: replace ngx.decode_args to core.string.decode_args (#6925) 2022-04-27 17:21:41 +08:00
Yilin Zeng
a6667361df
docs: fix description format in mocking doc (#6947) 2022-04-27 17:11:24 +08:00
罗泽轩
7fe94aaf41
docs: correct @tparam format (#6915)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-04-27 17:08:54 +08:00
罗泽轩
7b4bbba6b9
test: reject bad client TLS request in handshake (#6941) 2022-04-27 11:25:34 +08:00
罗泽轩
e56d23950f
chore: the second returned value of ngx.thread.wait is execution result but not err (#6910)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-04-27 10:25:12 +08:00
homeward
13b63b8bde
docs: update "Transformation" Plugins (#6891) 2022-04-27 10:24:57 +08:00
homeward
dbe7eeebba
docs: update "General" Plugins (#6886) 2022-04-26 20:45:18 +08:00
罗泽轩
68485f3a6b
chore(stream): there is no reusable api_ctx (#6933)
As the TLS handshake and the stream conn is 1:1, there is no reusable
api_ctx. Better to keep the same as the part of HTTP subsystem.
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-04-26 20:44:28 +08:00
homeward
8df9a7d265
docs: update "Authentication" Plugins (#6895)
* docs: update Authentication Plugins
2022-04-26 16:40:54 +08:00
蚊子先生
307b03baf3
fix: the same fix to other headers (#6921)
Co-authored-by: jiangyuncong <jiangyuncong@cecinvestment.com>
2022-04-26 10:15:30 +08:00
soulbird
fd9488da7c
fix: replace ngx.req.get_post_args to core.request.get_post_args (#6924) 2022-04-26 09:57:18 +08:00
tzssangglass
52c8a291ef
fix: replace get_headers and get_uri_args with the function in core.request (#6922) 2022-04-26 09:56:11 +08:00
Navendu Pottekkat
699e4c5ca0
docs: update "ip-restriction" Plugin docs (#6883)
Signed-off-by: Navendu Pottekkat <navendupottekkat@gmail.com>
2022-04-25 18:00:50 +08:00
罗泽轩
ea2cf66b45
feat(xRPC): support dynamic upstream with upstream_id (#6919)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-04-25 14:44:43 +08:00
soulbird
0bd8b5cbad
fix: upstream nodes cant't include ipv6 addr (#6908) 2022-04-25 14:41:55 +08:00
jackfu
42d6c22fa4
docs: update "limit-conn" plugin docs (#6897)
Co-authored-by: jack.fu <jack.fu@yijinin.com>
2022-04-24 10:44:55 +08:00
罗泽轩
d5ec37eb42
chore: don't report upstream http host check error in stream subsystem (#6904)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-04-24 10:34:01 +08:00
Navendu Pottekkat
76623073cb
docs: update "uri-blocker" Plugin docs (#6882)
Signed-off-by: Navendu Pottekkat <navendupottekkat@gmail.com>
2022-04-22 19:46:35 +08:00
Navendu Pottekkat
72274b4da8
docs: update "ua-restriction" Plugin docs (#6884)
Signed-off-by: Navendu Pottekkat <navendupottekkat@gmail.com>
2022-04-22 19:38:07 +08:00
Navendu Pottekkat
612b2a6cb7
docs: update "cors" docs (#6877)
Signed-off-by: Navendu Pottekkat <navendupottekkat@gmail.com>
2022-04-22 19:37:35 +08:00
罗泽轩
bf5585a971
fix: the client verify flag might not be set (#6906)
A more suitable way is to reject the client TLS handshake directly, just
like what Go has done.

Fix #6896
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-04-22 19:35:20 +08:00
罗泽轩
4a0e2903f3
feat(xRPC): support dynamic upstream (#6901)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-04-22 15:49:40 +08:00
homeward
57a42c2f2a
docs: Modify APISIX Chinese docs directory (#6898) 2022-04-22 10:32:19 +08:00
Gallardot
d67e892159
docs: update prowered-by.md (#6894) 2022-04-21 10:36:21 +08:00
罗泽轩
c5856267ff
feat(xRPC): basic stream support (#6885) 2022-04-21 09:44:19 +08:00
罗泽轩
506c873fb0
chore(redis): avoid recording bad value (#6876)
Signed-off-by: spacewander <spacewanderlzx@gmail.com>
2022-04-20 15:49:42 +08:00