This commit was moved from ipfs/kubo@a53d480

We've deprecated this system and have yet to move to a new system. We might as
well remove everything, switch to a new system, then deliberately trace the
entire system.


This commit was moved from ipfs/kubo@906f45e

chore(dep): update deps

This commit was moved from ipfs/kubo@37e0a60

Release v0.4.23


This commit was moved from ipfs/kubo@5b1687d

(we're implementing an _actual_ proxy)

License: MIT
Signed-off-by: Steven Allen <[email protected]>


This commit was moved from ipfs/kubo@11c229b

Instead of adding a new fake header (that could be spoofed by the client...),
just read the original request URI from the request object.

This also removes support for suborigins. They have never been implemented in
browsers and it looks like efforts have stalled. We can add support back if we
need it but, well, maintaining support was going to be more trouble than it was
worth.

License: MIT
Signed-off-by: Steven Allen <[email protected]>


This commit was moved from ipfs/kubo@72490f7

License: MIT
Signed-off-by: Marcin Rataj <[email protected]>


This commit was moved from ipfs/kubo@3ecccd6

When request is sent to http://localhost:8080/ipfs/$cid response has
HTTP 301 status code and "Location" header with redirect destination at
$cid.ipfs.localhost:8080

Redirect is followed by browsersi, but not by commandline tools.
Status 301 is ignored by curl in default mode: it will print response
and won't follow redirect, user needs to add -L for that.

To fix curl, we return correct payload in body of HTTP 301 response,
but set Clear-Site-Data header to ensure Origin sandbox can't be abused.

This requires a surgical workaround:
If Location header is present in ResponseWriter's Header map,
we ensure http.ServeContent() returns HTTP 301

Context: ipfs/kubo#6982

License: MIT
Signed-off-by: Marcin Rataj <[email protected]>


This commit was moved from ipfs/kubo@f9567a0

feat: gateway subdomains + http proxy mode

This commit was moved from ipfs/kubo@0114869

This commit upgrades go-ipfs-cmds and configures the commands HTTP API Handler
to only allow POST/OPTIONS, disallowing GET and others in the handling of
command requests in the IPFS HTTP API (where before every type of request
method was handled, with GET/POST/PUT/PATCH being equivalent).

The Read-Only commands that the HTTP API attaches to the gateway endpoint will
additional handled GET as they did before (but stop handling PUT,DELETEs).

By limiting the request types we address the possibility that a website
accessed by a browser abuses the IPFS API by issuing GET requests to it which
have no Origin or Referrer set, and are thus bypass CORS and CSRF protections.

This is a breaking change for clients that relay on GET requests against the
HTTP endpoint (usually :5001). Applications integrating on top of the
gateway-read-only API should still work (including cross-domain access).

Co-Authored-By: Steven Allen <[email protected]>
Co-Authored-By: Marcin Rataj <[email protected]>


This commit was moved from ipfs/kubo@1b49047

…Allowed

Spec says that response with 405 must set Allow headers.


This commit was moved from ipfs/kubo@7340543

HTTP API: Only allow POST requests (plus OPTIONS)

This commit was moved from ipfs/kubo@3304c28

(supersedes v2.7.3)

License: MIT
Signed-off-by: Marcin Rataj <[email protected]>


This commit was moved from ipfs/kubo@7d397ac

feat: webui v2.7.4

This commit was moved from ipfs/kubo@4fdc3ad

Closes #7164

License: MIT
Signed-off-by: Marcin Rataj <[email protected]>


This commit was moved from ipfs/kubo@8290ec1

fix: subdomain redirect for dir CIDs

This commit was moved from ipfs/kubo@6f4608b

This commit was moved from ipfs/kubo@135c451

feat: webui 2.7.5

This commit was moved from ipfs/kubo@28b7c3a

This commit was moved from ipfs/kubo@1e437c7

Previously, we only showed this /ipns paths. However, knowing the hash of the
current directory is useful regardless.


This commit was moved from ipfs/kubo@d8bc5c9

Even for dnslink websites.

fixes ipfs/kubo#7205


This commit was moved from ipfs/kubo@46ae021

This commit was moved from ipfs/kubo@fd6b59b

Merge release into master

This commit was moved from ipfs/kubo@dae6c03

feat(gateway): show the absolute path and CID every time

This commit was moved from ipfs/kubo@ffe35df

…ent types

This commit was moved from ipfs/kubo@2e87ac8

This commit was moved from ipfs/kubo@9201b1d

This commit was moved from ipfs/kubo@214d29e

This commit was moved from ipfs/kubo@e93f200

Fixes #7252 - Uses gabriel-vasile/mimetype to support additional content types

This commit was moved from ipfs/kubo@01e27f9

In the same way that an `index.html` file is rendered, if one is present, when the
requested path is a directory, now an `ipfs-404.html` file is rendered if
the requested file is not present within the specified IPFS object.

`ipfs-404.html` files are looked for in the directory of the requested path and each
parent until one is found, falling back on the well-known 404 error message.

License: MIT
Signed-off-by: JP Hastings-Spital <[email protected]>


This commit was moved from ipfs/kubo@dfceafd

…-404

Gateway renders pretty 404 pages if available

This commit was moved from ipfs/kubo@1744eb2

Report a consistent status code for HEAD requests that end up in a
redirect.


This commit was moved from ipfs/kubo@7c7888c

Files already have an explicit Content-Type set. Be sure to do this for
directory listings as well to avoid a fallback to autodetection in
net/http. That fallback fails when a ResponseWriter is installed that
performs compression.


This commit was moved from ipfs/kubo@d4952f2

…tent-type

fix(gateway): ensure directory listings have Content-Type text/html

This commit was moved from ipfs/kubo@2380343

fixes ipfs/kubo#4233 (comment)

Basically, there's a trade-off here:

1. We can support directory listings while supporting 404 pages (this PR).
2. If a 404 page is present, directory listings don't work.

Given that option 1 is more flexible and users shouldn't be _too_ confused if
they land on a directory with no index.html page, I've gone with that option.


This commit was moved from ipfs/kubo@6a2fe0a

fix: support directory listings even if a 404 page is present

This commit was moved from ipfs/kubo@edcd118

While the content of raw files retrieved via the gateway should never
change, the look and feel of the directory index can and will change
between versions of go-ipfs.

Incorporate the hash of assets/bindata.go into the ETag when appropriate


This commit was moved from ipfs/kubo@2d5f8b4

This commit was moved from ipfs/kubo@58aac04

chore: update WebUI to 2.8.0

This commit was moved from ipfs/kubo@285d743

This commit was moved from ipfs/kubo@0f76ed7

feat: webui v2.9.0

This commit was moved from ipfs/kubo@a30279e

(cherry picked from commit 20eab31)


This commit was moved from ipfs/kubo@bd9382f

(cherry picked from commit 7875812)


This commit was moved from ipfs/kubo@5be7e0f

backport fixes

This commit was moved from ipfs/kubo@3a8e076

This commit was moved from ipfs/kubo@84341d0

fix 3 bugs responsible for a goroutine leak (plus one other bug)

This commit was moved from ipfs/kubo@538174f

Release v0.6.0

This commit was moved from ipfs/kubo@d6e036a

This commit was moved from ipfs/kubo@19d6230

This commit was moved from ipfs/kubo@cc4a136

…ui-version

chore: bump webui version

This commit was moved from ipfs/kubo@7ce1d75

This commit was moved from ipfs/kubo@4c38ea7

…ui-version

chore:bump webui version to 2.10.1

This commit was moved from ipfs/kubo@e03b5ab

This commit was moved from ipfs/kubo@87dfc46

This:

- adds subdomain gateway support for ED25519 CIDs in a way that fits in
  a single DNS label to enable TLS for every IPNS website.

- cleans up subdomain redirect logic and adds more explicit error
  handling.

TL;DR on router logic:

When CID is longer than 63 characters, router at /ipfs/* and /ipns/*
converts to Base36, and if that does not help, returns a human readable
400 Bad Request error.

Addressing code review:
ipfs/kubo#7441 (review)

refactor: use b36 for all libp2p-keys in subdomains
Consensus reached in
ipfs/kubo#7441 (comment)
ipfs/kubo#7441 (comment)
ipfs/kubo#7441 (comment)


This commit was moved from ipfs/kubo@231fab8

This commit was moved from ipfs/kubo@4dbdbe0

This commit was moved from ipfs/kubo@e3905e1

Add support for one or more wildcards in the hostname definition
of a public gateway. This is useful for example to support easily
multiples environment.

Wildcarded hostname are set in the config as for example "*.domain.tld".


This commit was moved from ipfs/kubo@13e6bcf

This ensures implicit defaults are always present, even when
Gateway.PublicGateways is defined in the config.

User still can disable them, but needs to do it per hostname.

License: MIT
Signed-off-by: Marcin Rataj <[email protected]>


This commit was moved from ipfs/kubo@2ff6f1a

ipfs/kubo#7319 (comment)

License: MIT
Signed-off-by: Marcin Rataj <[email protected]>


This commit was moved from ipfs/kubo@6b6569f

These changes are needed to prepare for the Directory page UI improvements
implemented in ipfs/dir-index-html#37.

- update dir-index-html type structs
- emit gateway URL for root links
- emit CID of each directoryItem
- emit size of directory
- emit breadcrumbs


This commit was moved from ipfs/kubo@044790a

This commit was moved from ipfs/kubo@2feff33

[BOUNTY] Directory page UI improvements

This commit was moved from ipfs/kubo@e80601b

use t.Cleanup() to reduce the need to clean up servers in tests

This commit was moved from ipfs/kubo@bd08c0a

This commit was moved from ipfs/kubo@b88bdfe

chore: update dependencies

This commit was moved from ipfs/kubo@45e574b

This implements 'attachment' mode triggered then
?filename parameter is accompanied with &download=true

When Content-Disposition: attachment is detected by a modern browser
it will skip rendering and immediately open the "save as" dialog,
making this useful feature for using IPFS gateway as target of
"Download" links on various websites.

Parameter name was suggested in:
ipfs/kubo#4177 (comment)


This commit was moved from ipfs/kubo@fd01acd

This adds ASCII-only filename for clients that do not implement RFC 5987

Closes #7648


This commit was moved from ipfs/kubo@19ec5f4

This commit was moved from ipfs/kubo@1b4f5e7

(cherry picked from commit 17ef979)


This commit was moved from ipfs/kubo@54e7437

Release v0.7.0

This commit was moved from ipfs/kubo@ea77213

This commit was moved from ipfs/kubo@c407189

This commit was moved from ipfs/kubo@cd1feb3

This commit was moved from ipfs/kubo@43b8a31

This switches go-ipfs to dir-index-html after
ipfs/dir-index-html#43
got merged to master


This commit was moved from ipfs/kubo@c94bd76

This adds proper end-to-end tests for directory listing on Gateway port
that protects us against regressions oni each gw type:
- path gateway
- subdomain gateway
- dnslink website gateway

Tests cover:
- etag/unicode support
- breadcrumbs
- file name column
- hash column


This commit was moved from ipfs/kubo@3ed46d9

Release v0.7.0

This commit was moved from ipfs/kubo@1168639

…attachment

feat(gateway): Content-Disposition improvements

This commit was moved from ipfs/kubo@9b1171d

…ipfs

chore: webui v2.11.2

This commit was moved from ipfs/kubo@9c60ad8

https://github.com/ipfs-shipyard/ipfs-webui/releases/tag/v2.11.3

This commit was moved from ipfs/kubo@0014710

This commit was moved from ipfs/kubo@f626566

This commit was moved from ipfs/kubo@6ffd0aa

This adds localhost ipv6 addresses to the allowlist for use in browser
context and fixes WebUI on ipv6-only deployments: http://[::1]:5001/webui

We were missing CORS/Origin tests for API port so I've added basic ones
and included localhost/127.0.0.1/::1 variants.


This commit was moved from ipfs/kubo@d1c20bd

fix: webui on ipv6 localhost

This commit was moved from ipfs/kubo@0401f60

feat: ipfs-webui v2.11.4

This commit was moved from ipfs/kubo@675ef92

…bsite-redirect

fix(gw): preserve query on website redirect

This commit was moved from ipfs/kubo@0700c74

fix(dnslink-gw): breadcrumbs and CID column when dir listing

This commit was moved from ipfs/kubo@499e011

This commit was moved from ipfs/kubo@a329e4f

This commit was moved from ipfs/kubo@76f3395

This commit was moved from ipfs/kubo@3d98212

This commit was moved from ipfs/kubo@024bf80

This commit was moved from ipfs/kubo@fb3316a

fix: decrease log level of opencensus initialization

This commit was moved from ipfs/kubo@4823547

Problem statement and rationale for doing this can be found under
"Option C" at: ipfs/in-web-browsers#169

TLDR is:

`https://dweb.link/ipns/my.v-long.example.com` can be loaded from a
subdomain gateway with a wildcard TLS cert if represented as a single
DNS label: `https://my-v--long-example-com.ipns.dweb.link`


This commit was moved from ipfs/kubo@09178aa