Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP

v1.5.0

ES compatiblity.
Added
- allow disabling ipwhitelist by setting its value to `false`
- updated pom to depend on elasticsearch-parent project
- travis test matrix for different ES versions

Changed
- restored default healthcheck for authenticated users
- unauthenticated healthcheck for `/` returns `"{\"OK\":{}}"`
- thanks @feaster83

Read release notes

Read release notes

v1.1.0-security-fix

Applied security fix to version compatible with ES 1.0

Read release notes

v1.4.0.Beta1

ES 1.4.0.Beta1 compatibility

v1.3.0-security-fix

fixed security problem in ip authentication. ES 1.3.0 compatible
security problem  introduced in commit 53d1cf8

changes:

- remove usage of 'Host' header to identify client's ip
- the request ip is used to ip authenticate direct connected clients
- add usage of trusted proxy chain
- the trusted proxy chain is used to ip authenticate indirect connected clients
- added unit and integration tests
- updated log messages

Read release notes

v1.2.0-security-fix

Security Fix for Ip Authentication compatible with ES 1.2.0
Due to implementation of how the ip of the client
is obtained it is very easy for an attacker to authenticate
its ip by setting the ip in the 'Host' header or as first ip in the
'X-Forwarded-For' header

Read release notes

v1.1.0

Merge pull request #11 from Asquera/1.1.0
updated -> ES 1.0.0

Read release notes

Read release notes

Something went wrong with that request. Please try again.