Chris LuandClaude Opus 5.5 8d96985131 security: scoped filer tokens are not admin credentials (#12551) ...

* security: do not accept a path- or method-scoped filer token as admin

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* security: test that scoped filer tokens fail the admin token check

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-10 21:18:59 -08:00

..

certreload

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

grpc_peer_test.go

security: scoped filer tokens are not admin credentials (#12551)

2026-11-10 21:18:59 -08:00

grpc_peer.go

security: scoped filer tokens are not admin credentials (#12551)

2026-11-10 21:18:59 -08:00

guard_signing_key_test.go

security: hot-reload JWT signing keys on SIGHUP (#9826)

2026-06-04 22:26:08 -07:00

guard_whitelist_test.go

Revert #9440 — volume admin fail-closed gate breaks multi-host clusters (#9472)

2026-05-12 16:00:44 -07:00

guard.go

security: hot-reload JWT signing keys on SIGHUP (#9826)

2026-06-04 22:26:08 -07:00

jwt_filer_provider_test.go

filer.sync: sign proxied chunk I/O from the per-side security file (#11645)

2026-10-08 22:04:06 +08:00

jwt.go

security: scoped filer tokens are not admin credentials (#12551)

2026-11-10 21:18:59 -08:00

tls_client_cert_test.go

security: fail closed on gRPC TLS errors, verify dialed server identity (#12263)

2026-10-30 20:04:45 -07:00

tls_reload.go

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

tls_sni_test.go

fix: port in SNI address when using domainName instead of IP for master (#8500)

2026-03-04 07:05:45 -08:00

tls.go

security: fail closed on gRPC TLS errors, verify dialed server identity (#12263)

2026-10-30 20:04:45 -07:00