ec5293ce29
jwt,browser: allow short-expiry tokens for GETs ( #4684 )
...
This commit fixes a potential security issue, whereby a full-access
token to the server would be available in the GET URL of a download
request. This fixes that issue by introducing short-expiry tokens, which
are only valid for one minute, and are regenerated for every download
request.
This commit specifically introduces the short-lived tokens, adds tests
for the tokens, adds an RPC call for generating a token given a
full-access token, updates the browser to use the new tokens for
requests where the token is passed as a GET parameter, and adds some
tests with the new temporary tokens.
Refs: https://github.com/minio/minio/pull/4673
7 years ago
d0f18dc1b5
browser: Use custom input number step-up/down function ( #4524 )
8 years ago
0f5483f497
browser: Disable usage/free stats for browser-gateway ( #4497 )
8 years ago
b78f6fbcc5
Do not send envVars in ServerInfo() ( #4422 )
...
Sending envVars along with access and secret
exposes the entire minio server's sensitive
information. This will be an unexpected
situation for all users.
If at all we need to look for things like if
credentials are set through env, we should
only have access to only this information
not the entire set of system envs.
8 years ago
a767ad321a
Browser: Fix Safari Blob download issue ( #4357 )
8 years ago
d1971b9a4d
Prevent duplicate policy rows from being created ( #4276 )
8 years ago
d13aa1c42d
browser: make input number types readonly in share objects modal ( #4273 )
8 years ago
972a527b66
browser: Selecting a new bucket appends objects list to previous bucket's list ( #4252 )
8 years ago
1ea53b4d9f
browser: Listing should append instead of replacing previous listing ( #4188 )
...
Fixes #4144
8 years ago
1b0b2c1c76
Browser: Make login form browser auto-fill compatible ( #4091 )
8 years ago
e9037b9d36
fix: add white space in storage usage section ( #4038 )
...
Fix for #3962 - add whitespace before storage usage details section in
Browse component
8 years ago
5cec6bd80d
Browser: Use object name with prefix to delete sub-path objects ( #4013 )
8 years ago
96050c1e21
browser: Do not show "Loading..." if there are no buckets. ( #3904 )
8 years ago
e77885d671
Browser: Add Object.assign polyfill to support older browsers ( #3884 )
8 years ago
29ff9674a0
browser: Humanize expiry time for Share-Object. ( #3861 )
8 years ago
436db49bf3
Share object expiry value modification modal was not working ( #3860 )
8 years ago
966818955e
Browser: Implement multiple object delete ( #3859 )
8 years ago
0bae3330e8
browser: Send correct arguments for RemoveObjects web handler. ( #3848 )
...
Fixes #3839
8 years ago
fcad4a44fd
Browser: Remove duplicate object entries while sorting ( #3813 )
8 years ago
25b5a0534f
browser: Update ui-assets and fix the copyright header. ( #3790 )
8 years ago
52d6678bf0
Browser: Implement multi select user interface for object listings ( #3730 )
8 years ago
ae4656e699
browser: Remove currentPath prefix in object names from list result. ( #3750 )
8 years ago
25b936c369
browser: Implement infinite scrolling for object listing. ( #3720 )
...
fixes #2831
8 years ago
f7f103725b
browser: Make logo and "Minio Browser" text non-clickable. ( #3668 )
...
fixes #3601
8 years ago
46743c7918
browser: Component attr names should not clash with redux state keys. ( #3656 )
...
fixes #270
8 years ago
659d5aabd1
browser: Access to private paths redirects to login. ( #3622 )
8 years ago
cead24b0f7
miniobrowser: Bring Minio browser source into minio repo. ( #3617 )
8 years ago
Brendan Ashworth