Erik Sundell d94796a022 Auth: Remove trailing / in cookies' path (#22265) (#22265) ...

According to the stackoverflow answer below, it is recommended to not
include a trailing / in cookies' path. By removing the trailing / for
our cookies path value, people's browsers visiting grafana will pass the
cookie not only to /grafana/ sub paths but also to /grafana sub paths.

This commit avoids the situation where a user would visit
http://localhost/grafana, get redirected to
http://localhost/grafana/login, and following login get redirected back
to http://localhost/grafana, but since the grafana_session cookie isn't
passed along get redirected back once more to
http://localhost/grafana/login.

ref: https://stackoverflow.com/questions/36131023/setting-a-slash-on-cookie-path/53784228#53784228
ref: https://tools.ietf.org/html/rfc6265#section-5.1.4

2020-04-06 17:56:19 +03:00

..

auth_proxy

AuthProxy: Fixes bug where long username could not be cached (#22926)

2020-03-20 21:50:27 +01:00

auth_proxy.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

auth_test.go

…

auth.go

API: Fix redirect issues (#22285)

2020-03-11 11:04:48 +02:00

cookie.go

Auth: Remove trailing / in cookies' path (#22265) (#22265)

2020-04-06 17:56:19 +03:00

dashboard_redirect_test.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

dashboard_redirect.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

headers.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

logger.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

middleware_basic_auth_test.go

…

middleware_test.go

Auth: Remove trailing / in cookies' path (#22265) (#22265)

2020-04-06 17:56:19 +03:00

middleware.go

…

org_redirect_test.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

org_redirect.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

perf.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

quota_test.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

quota.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

recovery_test.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

recovery.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

render_auth.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00

request_metrics.go

…

request_tracing.go

…

testing.go

…

util.go

Backend Plugins: Support handling of streaming resource response (#22580)

2020-03-06 01:44:07 +07:00

validate_host.go

chore: avoid aliasing models in middleware (#22484)

2020-02-28 12:50:58 +01:00