raboof/pekko
1
0
Fork 0
Code Issues Pull requests Projects Releases 6 Packages Wiki Activity Actions 10
19912 commits 1 branch 31 tags 268 MiB
Commit graph

460 commits

Author SHA1 Message Date
Johannes Rudolph
3cfb815b94 Directory traversal fix (backport to akka-http 2.4.x) (#21584) 
* =htp #346 add test to check for potential directory traversal path patterns

(cherry picked from commit cb7ba25ece893311a520410b31ab55765d6261c4)

* =htp add test checking getFromDirectory is able to serve files with percent-encodings

(cherry picked from commit 1d18d9e189fed1d3b5b776bee7ba86472c0d71ec)

* =htp #346 add test for path traversal attempts in listDirectoryContents

(cherry picked from commit 7027eaf1457d7a93309609476da9232d6f612f18)

* =htp test if getFromDirectory follows symbolic links

(cherry picked from commit f1b379f9b9022cab21c6a00c135dca4c6bac327f)

* =htp #346 prevent path traversal attempts in getFromDirectory / listDirectoryContents

(cherry picked from commit dac15938dd563f890aa12c67ec696126267bad42)
 2016-09-30 11:01:36 +02:00
gosubpl
9b73fefdce =htc don't encode known to be empty entities (#21393) (#21396) 
* =htc don't encode known to be empty entities (#21393)

* =htc added missing headers in the improved marshaller (#21393)
 2016-09-13 14:32:02 +02:00
gosubpl
7bcf0285a1 =htc #20793 make Marshaller.fromStatusCode emit empty entity for StatusCode with allowEntity=false 2016-09-07 19:12:42 +02:00
Hawstein
b9a05aff96 add java api for websocket testkit #21184 
And additionally adds unit test for WebSocketDirectives #20466
 2016-09-02 13:28:49 +02:00
2beaucoup
9ef93c6200 =htp change extract to provide (#21302) 2016-08-28 12:57:24 +01:00
dyk
0e302d2236 =htp Extract RemoteAddress.Unknown when cannot find client ip (#21289) 
* handle unknown client ip

* updated doc

* fixed java dsl test
 2016-08-26 15:47:36 +01:00
Hawstein
3e2bdb55a3 add extractActorSystem directive (#21097) 2016-08-16 14:59:05 +02:00
Hawstein
07c6332a22 !htc use correct rejection in http javadsl (#21179) 2016-08-15 17:32:01 +02:00
Konrad Malawski
8a1f8f27dc =htc fix JsonFraming completion bug, exposed by new Interpreter 2016-08-02 15:58:34 +02:00
Konrad Malawski
9cc32c3aba +htp #18837 completely rewrite EntityStreamingSupport 
added CSV examples
updated docs
EntityStreamingSupport is now an entry point, to all streaming things
both read and write side use it
it's easy to extend as well
 2016-08-02 15:27:21 +02:00
Konrad Malawski
6562ddd2df =htp address review feedback on JSON streaming 2016-08-02 15:27:21 +02:00
Konrad Malawski
bc536be32c =htp introduce ToByteStringMarshaller alias and fix fixme 2016-08-02 15:27:21 +02:00
Konrad Malawski
f2419f5a08 =htp framed entity streaming cleanup, renames 2016-08-02 15:27:21 +02:00
Konrad Malawski
c3308149be +htp #18837 allow as[Source[Tweet, NotUsed]] 2016-08-02 15:27:21 +02:00
Konrad Malawski
c76ec2ac15 +htp #18837 more docs and final cleanups, complete java docs 2016-08-02 15:27:21 +02:00
Konrad Malawski
db880a3db0 +htp #18837 implemented JavaDSL for Source streaming 2016-08-02 15:27:21 +02:00
Konrad Malawski
24454f7f09 +htp #18837 JSON framing and framed entity streaming directives 2016-08-02 15:27:21 +02:00
Łukasz Dubiel
8e71346295 =htp #21029 Move redirect to RequestContext. (#21071) 2016-08-02 11:30:32 +02:00
Johan Andrén
74243a28f8 Additional JavaDSL package structure and docs #20945 2016-07-29 16:42:40 +02:00
Hawstein
3cfb6f9d91 align package structure in http javadsl 2016-07-29 16:42:28 +02:00
Hawstein
6fb2d176a1 +htp #20881 add toStrictEntity and extractStrictEntity directive (#20953) 2016-07-22 11:33:30 +02:00
Konrad Malawski
fde9d86879 ByteString optimisations of methods in HTTP parsing hot-path (#20994) 
* =act #20992 prepare benchmarks for ByteString optimisations

* =act #20992 optimise common ByteString operations: drop,take,slice...

* =act,htc #15965 add ByteString.decodeString(java.nio.charsets.Charset)
 2016-07-20 14:01:51 +02:00
Konrad Malawski
d3ea9e49db =htp cache default RejectionHandler instance, it's safe to share (#20996) 2016-07-20 12:18:52 +02:00
Nikolay Donets
b7567a5c55 Nikdon 20535 check same origin (#20962) 
* =htp checkSameOrigin shows allowed origins

add HttpOriginRangeDefault into the javadsl and refactor

resolving binary compatibility + add copyright

return back public static final in the HttpOriginRange

* =htp #20535 address bin compat issues in checkSameOrigin PR
 2016-07-15 13:39:40 +02:00
Konrad Malawski
65fae200b7 =htp #20884 fix header name rendering issue when $minus present (#20940) 2016-07-13 14:53:56 +02:00
Nafer Sanabria
32810e1f1d =htc, doc replace usages of deprecated methods of FileIO (#20928) 2016-07-10 17:41:57 +02:00
Konrad Malawski
54ecf32d2b =htp #20915 fix too small timing issue in DirectivesSpec (#20916) 
* =htp #20915 fix too small timing issue in DirectivesSpec

* applying scalariform reformatting that keeps popping up
 2016-07-08 10:33:32 +02:00
gosubpl
b6f6438e96 doc #20466 Java range-directives examples added (#20892) 
* #20466 Java range-directives examples added

* #20466 post-review changes
 2016-07-06 23:23:45 +02:00
Andrea Peruffo
a230f2fe34 =str switch to java std lib ThreadLocalRandom. (#20877) 2016-07-05 14:59:48 +02:00
monkey-mas
dce174b455 !htp #20102 Fix authentication scheme of WWW-Authentication header for OAuth2 over HTTP (#20756) 2016-06-30 10:28:40 +02:00
Michal Sitko
72f8544efd +htp #18929 add withSizeLimit directive (#20760) 
withSizeLimit and withoutSizeLimit directives added
 2016-06-28 12:14:44 +02:00
Tobias Pfeifer
3723959b69 Akka-HTTP: basicAuthentication directive promotes insecure passwords #18858 (#20820) 
the Credentials Object used in the authenticateBasic Directive can be verified against passwords that are stored with a hashing function. By providing the same hashing function as an argument the clear-text password in the HttpCredentials will be hashed the same way prior to comparing against the stored secret.
 2016-06-25 11:24:54 +02:00
gosubpl
4b89fcd643 +doc #20466 akka http java dsl example snippets timeout directives (#20812) 
* #20466 added checks to the TimeoutDirectivesExampleSpec

* #20466 added missing Java directive wrapper, added Java test, added some comments to Scala spec

* #20466 test minor fixes (typos, comments, unused code)

* #20466 replaced placeholders with proper snippets in Java docs

* #20466 added proper withRequestTimeout example to JavaTestServer

* #20466 comment - clarifies the request-timeout = infinite case

* #20466 post-review changes (#20812)
 2016-06-22 01:55:28 +02:00
Hawstein
cc22ed4560 +doc example snippet for akka http java dsl: SecurityDirectives (#20717) 2016-06-19 02:06:19 +02:00
Hawstein
efb18c95b1 example snippet for akka http java dsl: FileAndResourceDirectives (#20758) 2016-06-09 15:34:25 +02:00
Patrik Nordwall
3c2e31ea41 Merge pull request #20445 from kkasravi/issue_20414_kkasravi 
fixes #20414 Allow different ActorMaterializer subtypes
 2016-06-08 10:12:25 +02:00
kwyczesany
7fdd5983a3 +htp #19756: Add extractData and extractRequestEntity directives. (#20730) 
* 19756: Add extractData and extractRequestEntity directives.

remove unnecessary import

* #19756: add documentation to extractDataBytes and extractRequestEntity directives
 2016-06-07 21:02:38 +02:00
Kam Kasravi
049b95077f fixes #20414 Allow different ActorMaterializer subtypes 2016-06-07 07:13:03 -07:00
Konrad Malawski
f49708d8b7 +htp #20705 allows javadsl creating custom rejections 2016-06-03 14:57:12 +02:00
Hawstein
f98c1946d8 +doc #20466 example snippet for akka http java dsl: BasicDirectives (#20647) 2016-06-03 13:43:42 +02:00
Patrik Nordwall
4acc1cca6a Merge pull request #20681 from bantonsson/wip-ban-update-scalariform 
Update to a working version of Scalariform
 2016-06-03 07:20:34 +02:00
gosubpl
54c99d8184 =htp #20648 encoder now encodes all response types, not only successes (#20691) 
* #20648 encoder now encodes all response types, not only successes

* #20648 fix by autoformatter
 2016-06-02 22:39:20 +02:00
Björn Antonsson
c66ce62d63 Update to a working version of Scalariform 2016-06-02 22:12:36 +02:00
Konstantin Fedorov
f9922398a7 +htp #19929 NameReceptacle[T].as[B] take Unmarshaller[T, B] instead of FromStringUnmarshaller 2016-06-02 15:27:18 +02:00
tjugo
0eda4075ef +htp #20535 add checkSameOrigin directive to HeaderDirectives (#20560) 
*  #20535 add checkSameOrigin directive to WebSocketDirectives

* refactoring + add docs

* refactoring + cleanup in docs

* fix types and conversions in the InvalidOriginHeaderRejection

* simplify InvalidOriginHeaderRejection to InvalidOriginRejection
 2016-06-02 11:58:20 +02:00
Jakub Kozłowski
609fb0ec03 =http #20687 remove dead code and unused import from Unmarshaller (#20688) 2016-06-02 10:57:09 +02:00
Stefano Bonetti
3f8dacfd44 +htp #20198 onCompleteWithBreaker directive (#20402) 2016-05-31 21:48:19 +02:00
Konrad Malawski
a299b30c0b !htp,java #20592 javadsl complete* should take Marshaller[...,RequestEntity] (#20593) 2016-05-24 15:20:28 +02:00
Johan Andrén
acb71ac4e5 !htp Move classes from javadsl to javadsl.server to keep in release jars #20556 (#20558) 2016-05-19 11:30:59 +02:00
Johan Andrén
ebef60388f Workaround for unidoc failing to compile scaladsl.server.Rejection 2016-05-16 16:59:12 +02:00