ericanannn-blip 3051aebb28 fix(middleware): log rejected CSRF requests with the trusted client address (#6692) ...

A panel or API request rejected for a missing or wrong CSRF token got a bare
403 and left nothing in the log, so an operator chasing failed logins from a
stale tab or a script had no trace. CSRFMiddleware now logs a warning with the
method, path and client address. The address comes from getRemoteIp, which
honours the trusted-proxy list, instead of gin's ClientIP, which trusts any
peer's X-Forwarded-For.

2026-10-24 04:51:21 +02:00

..

controller

fix(middleware): log rejected CSRF requests with the trusted client address (#6692)

2026-10-24 04:51:21 +02:00

entity

feat(notifications): add a failed-check threshold for node.down alerts (#6768)

2026-10-24 04:26:13 +02:00

global

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

job

feat(notifications): add a failed-check threshold for node.down alerts (#6768)

2026-10-24 04:26:13 +02:00

locale

feat(discord): add Discord notification bot service (#6486)

2026-09-13 14:04:53 +02:00

middleware

fix(middleware): log rejected CSRF requests with the trusted client address (#6692)

2026-10-24 04:51:21 +02:00

network

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

runtime

fix(node): don't delete clients when a node reports an empty snapshot (#6734)

2026-10-05 16:12:08 +02:00

service

feat(notifications): add a failed-check threshold for node.down alerts (#6768)

2026-10-24 04:26:13 +02:00

session

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

translation

feat(notifications): add a failed-check threshold for node.down alerts (#6768)

2026-10-24 04:26:13 +02:00

websocket

fix(tuic): client speed display and certificate button layout (#6723)

2026-10-05 19:46:46 +02:00

cadence_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

node_contract_test.go

fix(node): don't delete clients when a node reports an empty snapshot (#6734)

2026-10-05 16:12:08 +02:00

routes_contract_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

schedule_test.go

fix(settings): accept five-field crontab for report and LDAP schedules

2026-10-11 20:37:04 +02:00

web_mtls_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_mtls.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_tuic_shutdown_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

web.go

fix(settings): accept five-field crontab for report and LDAP schedules

2026-10-11 20:37:04 +02:00