Chris LuandDevin b9689882e2 security: reject negative filer token lifetimes ...

A negative expires_after_seconds reached GenJwtForFilerServer and produced
a token with no expiration claim. Also synchronize the Authorization-header
capture in the proxy test and restore the prior viper key on cleanup.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-10-07 10:03:42 -07:00

..

certreload

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

guard_signing_key_test.go

security: hot-reload JWT signing keys on SIGHUP (#9826)

2026-06-04 22:26:08 -07:00

guard_whitelist_test.go

Revert #9440 — volume admin fail-closed gate breaks multi-host clusters (#9472)

2026-05-12 16:00:44 -07:00

guard.go

security: hot-reload JWT signing keys on SIGHUP (#9826)

2026-06-04 22:26:08 -07:00

jwt_filer_provider_test.go

security: reject negative filer token lifetimes

2026-10-07 10:03:42 -07:00

jwt.go

security: reject negative filer token lifetimes

2026-10-07 10:03:42 -07:00

tls_client_cert_test.go

util: serialize all ViperProxy access so startup cannot hit concurrent map read/write (#11470)

2026-09-26 16:09:29 +08:00

tls_reload.go

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

tls_sni_test.go

fix: port in SNI address when using domainName instead of IP for master (#8500)

2026-03-04 07:05:45 -08:00

tls.go

util: serialize all ViperProxy access so startup cannot hit concurrent map read/write (#11470)

2026-09-26 16:09:29 +08:00