Brendan Ashworth
ec5293ce29
jwt,browser: allow short-expiry tokens for GETs ( #4684 )
...
This commit fixes a potential security issue, whereby a full-access
token to the server would be available in the GET URL of a download
request. This fixes that issue by introducing short-expiry tokens, which
are only valid for one minute, and are regenerated for every download
request.
This commit specifically introduces the short-lived tokens, adds tests
for the tokens, adds an RPC call for generating a token given a
full-access token, updates the browser to use the new tokens for
requests where the token is passed as a GET parameter, and adds some
tests with the new temporary tokens.
Refs: https://github.com/minio/minio/pull/4673
2017-07-24 12:46:37 -07:00
Rushan
d0f18dc1b5
browser: Use custom input number step-up/down function ( #4524 )
2017-06-14 17:34:11 -07:00
Rushan
0f5483f497
browser: Disable usage/free stats for browser-gateway ( #4497 )
2017-06-08 15:09:50 -07:00
Harshavardhana
b78f6fbcc5
Do not send envVars in ServerInfo() ( #4422 )
...
Sending envVars along with access and secret
exposes the entire minio server's sensitive
information. This will be an unexpected
situation for all users.
If at all we need to look for things like if
credentials are set through env, we should
only have access to only this information
not the entire set of system envs.
2017-05-24 21:09:23 -07:00
Rushan
a767ad321a
Browser: Fix Safari Blob download issue ( #4357 )
2017-05-17 17:03:44 -07:00
poornas
d1971b9a4d
Prevent duplicate policy rows from being created ( #4276 )
2017-05-10 09:52:31 -07:00
Rushan
d13aa1c42d
browser: make input number types readonly in share objects modal ( #4273 )
2017-05-07 18:02:19 -07:00
Krishna Srinivas
972a527b66
browser: Selecting a new bucket appends objects list to previous bucket's list ( #4252 )
2017-05-04 11:12:46 -07:00
Krishna Srinivas
1ea53b4d9f
browser: Listing should append instead of replacing previous listing ( #4188 )
...
Fixes #4144
2017-04-28 09:30:26 -07:00
Rushan
1b0b2c1c76
Browser: Make login form browser auto-fill compatible ( #4091 )
2017-04-11 10:11:42 -07:00
Rajeesh C V
e9037b9d36
fix: add white space in storage usage section ( #4038 )
...
Fix for #3962 - add whitespace before storage usage details section in
Browse component
2017-04-04 09:14:45 -07:00
Rushan
5cec6bd80d
Browser: Use object name with prefix to delete sub-path objects ( #4013 )
2017-03-30 23:28:28 -07:00
Rushan
fbfb4fc5a0
Browser: Use polyfill to support Object.assign in IE11 ( #3942 )
2017-03-21 13:48:07 -07:00
Krishna Srinivas
96050c1e21
browser: Do not show "Loading..." if there are no buckets. ( #3904 )
2017-03-14 19:07:23 -07:00
Rushan
a27d1b3d86
Browser: Use babel-polyfill to support new ES6 built-ins in older browsers ( #3900 )
2017-03-14 15:02:20 -07:00
Rushan
e77885d671
Browser: Add Object.assign polyfill to support older browsers ( #3884 )
2017-03-10 14:30:23 -08:00
Rushan
ccc3349f0c
Browser: Show complete bucket name by removing the ellipsis cut off ( #3877 )
2017-03-09 10:42:38 -08:00
Krishna Srinivas
29ff9674a0
browser: Humanize expiry time for Share-Object. ( #3861 )
2017-03-06 20:13:52 -08:00
Krishna Srinivas
436db49bf3
Share object expiry value modification modal was not working ( #3860 )
2017-03-06 18:50:25 -08:00
Rushan
966818955e
Browser: Implement multiple object delete ( #3859 )
2017-03-06 15:43:43 -08:00
Krishna Srinivas
0bae3330e8
browser: Send correct arguments for RemoveObjects web handler. ( #3848 )
...
Fixes #3839
2017-03-03 17:07:17 -08:00
Rushan
fcad4a44fd
Browser: Remove duplicate object entries while sorting ( #3813 )
2017-02-28 13:11:34 -08:00
Harshavardhana
25b5a0534f
browser: Update ui-assets and fix the copyright header. ( #3790 )
2017-02-22 17:27:26 -08:00
Rushan
52d6678bf0
Browser: Implement multi select user interface for object listings ( #3730 )
2017-02-22 14:51:38 -08:00
Krishna Srinivas
ae4656e699
browser: Remove currentPath prefix in object names from list result. ( #3750 )
2017-02-15 13:07:47 -08:00
Krishna Srinivas
25b936c369
browser: Implement infinite scrolling for object listing. ( #3720 )
...
fixes #2831
2017-02-10 22:54:42 -08:00
Krishna Srinivas
f7f103725b
browser: Make logo and "Minio Browser" text non-clickable. ( #3668 )
...
fixes #3601
2017-01-31 13:44:07 -08:00
Krishna Srinivas
46743c7918
browser: Component attr names should not clash with redux state keys. ( #3656 )
...
fixes #270
2017-01-30 14:25:55 -08:00
Krishna Srinivas
659d5aabd1
browser: Access to private paths redirects to login. ( #3622 )
2017-01-24 12:08:00 -08:00
Krishna Srinivas
cead24b0f7
miniobrowser: Bring Minio browser source into minio repo. ( #3617 )
2017-01-23 18:07:22 -08:00
