Skip to content

v0.4.12

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Oct 04:29
· 62 commits to master since this release
v0.4.12
388e159
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

修正

  • cors ミドルウェアで allow_origins: ["*"]・allow_credentials: false のとき、資格情報（Cookie か Authorization）付きのリクエストには Access-Control-Allow-Origin に Origin の値を返すようにしました（#293）。これまでは * を返していました。Gateway API v1.5 の conformance が期待する形です（v1.6 はどちらでもよい）。Access-Control-Allow-Credentials は付けないので、ブラウザがその応答を使わないのは前と同じです。プリフライトと、headers の cors は変わりません。

UI: TCP-UDP-rproxy-ui v0.4.5 · Kubernetes: rproxy-gateway v0.4.12

Fixed

  • With the cors middleware's allow_origins: ["*"] and allow_credentials: false, a request with credentials (Cookie or Authorization) now gets its Origin back in Access-Control-Allow-Origin (#293), instead of *. This is what Gateway API v1.5's conformance expects (v1.6 takes either). Access-Control-Allow-Credentials is not added, so browsers still do not use that response, as before. Preflights and the cors of headers are unchanged.

UI: TCP-UDP-rproxy-ui v0.4.5 · Kubernetes: rproxy-gateway v0.4.12

Assets 23
Loading