Andrei Aaron 7ec34a9520 feat(api): log session/audit subject from UserAccessControl (#4029) ...

Read identity from request context after handlers run so Basic, Bearer,
OIDC, mTLS, etc. are covered; use subject "anonymous" when unset.
Redact Authorization in SessionLogger without decoding credentials.
Add session_test.go for SessionLogger and SessionAuditLogger.

Signed-off-by: Andrei Aaron <andreifdaaron@gmail.com>

2026-05-01 09:35:22 -07:00

..

config

fix(auth): refine OIDC identity handling and claim-mapping logs (#4028)

2026-05-01 09:34:48 -07:00

constants

fix(security): enhance timeout configurations and body size limits fo… (#3984)

2026-04-26 22:23:48 +03:00

errors

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

authn_internal_test.go

fix(auth): refine OIDC identity handling and claim-mapping logs (#4028)

2026-05-01 09:34:48 -07:00

authn_test.go

fix(auth): prevent open redirect via callback_ui (#3844)

2026-03-08 08:13:16 +02:00

authn.go

fix(auth): refine OIDC identity handling and claim-mapping logs (#4028)

2026-05-01 09:34:48 -07:00

authz.go

fix: don't skip "latest" tag authz check for update (#3847)

2026-03-08 09:42:53 +02:00

bearer_aws_secrets_manager_test.go

feat(jwt-asm): support AWS Secrets Manager for JWT verification (#3763)

2026-02-03 09:25:38 -08:00

bearer_aws_secrets_manager.go

feat(jwt-asm): support AWS Secrets Manager for JWT verification (#3763)

2026-02-03 09:25:38 -08:00

bearer_oidc_test.go

feat(oidc): support per-issuer CA (#3760)

2026-02-01 23:57:27 +02:00

bearer_oidc.go

feat(jwt-asm): support AWS Secrets Manager for JWT verification (#3763)

2026-02-03 09:25:38 -08:00

bearer_test.go

feat(jwt-asm): support AWS Secrets Manager for JWT verification (#3763)

2026-02-03 09:25:38 -08:00

bearer.go

feat(jwt-asm): support AWS Secrets Manager for JWT verification (#3763)

2026-02-03 09:25:38 -08:00

controller_internal_test.go

fix(auth): prevent open redirect via callback_ui (#3844)

2026-03-08 08:13:16 +02:00

controller_test.go

Multipart download enhancements (#4021)

2026-04-28 08:43:15 +03:00

controller.go

fix(security): enhance timeout configurations and body size limits fo… (#3984)

2026-04-26 22:23:48 +03:00

cookiestore.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

htpasswd_test.go

test: fix some coverage issues, refactored some of the pagination logic to accomplish this (#3674)

2025-12-23 19:06:13 +02:00

htpasswd.go

fix: add support for sha256 and sha512 in htpasswd (#3497)

2025-11-09 15:28:29 +02:00

ldap.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

logout_internal_test.go

feat(auth): support OIDC RP-Initiated Logout (#3975)

2026-04-25 23:19:29 +03:00

mtls_test.go

fix: do not reject requests having an Authorization header if basic auth is disabled (#3673)

2025-12-23 11:30:22 +02:00

proxy_internal_test.go

fix(security): enhance timeout configurations and body size limits fo… (#3984)

2026-04-26 22:23:48 +03:00

proxy_test.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

proxy.go

fix(security): enhance timeout configurations and body size limits fo… (#3984)

2026-04-26 22:23:48 +03:00

quota_test.go

feat(api): add repository quota enforcement middleware (#3923)

2026-04-13 23:18:34 +03:00

quota.go

feat(api): add repository quota enforcement middleware (#3923)

2026-04-13 23:18:34 +03:00

recovery.go

fix: migrate to Go module v2 for proper semantic versioning (#3462)

2025-10-16 22:43:47 -07:00

routes_internal_test.go

fix(api): support multipart range blob pulls (#3995)

2026-04-27 08:17:08 +03:00

routes_test.go

test: refactor countingReader into partialReaderOpenTracker and partialReaderReadCloser (#4027)

2026-05-01 13:51:24 +03:00

routes.go

feat(auth): map OpenID groups claim (#3999)

2026-05-01 11:59:51 +03:00

runtime_windows.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

runtime.go

chore: update golangci-lint and fix all issues (#3575)

2025-11-22 23:36:48 +02:00

session_test.go

feat(api): log session/audit subject from UserAccessControl (#4029)

2026-05-01 09:35:22 -07:00

session.go

feat(api): log session/audit subject from UserAccessControl (#4029)

2026-05-01 09:35:22 -07:00

tls_config_watcher.go

feat(tls): implement dynamic TLS certificate reloading with file watching (#3792)

2026-02-15 13:01:50 -08:00