NoRoutes/vibeproxy
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Default new access lists to allow-by-default

Browse Source 
Basic-Auth-only access lists (no CIDR rules) were unreachable: with
Default allow off, checkAccess denied every IP with 403 before the
auth prompt ever ran. New lists now default to allow-by-default, and
the label clarifies the interaction with Basic Auth.
This commit is contained in:
owen
2026-08-17 11:35:16 -05:00
parent affdbfaa41
commit db91c24d7f
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/web/accesslists.go
+1 -1
View File
@@ -25,7 +25,7 @@ func (h *Web) handleAccessListsList(w http.ResponseWriter, r *http.Request) {
} }
func (h *Web) handleAccessListForm(w http.ResponseWriter, r *http.Request) { func (h *Web) handleAccessListForm(w http.ResponseWriter, r *http.Request) {
var l models.AccessList l := models.AccessList{DefaultAllow: true}
isNew := true isNew := true
if idStr := r.PathValue("id"); idStr != "" { if idStr := r.PathValue("id"); idStr != "" {
isNew = false isNew = false
internal/web/templates/access_list_form.html
+1 -1
View File
@@ -11,7 +11,7 @@
<div class="col-md-3 d-flex align-items-end"> <div class="col-md-3 d-flex align-items-end">
<div class="form-check form-switch"> <div class="form-check form-switch">
<input class="form-check-input" type="checkbox" name="default_allow" id="da" {{if $l.DefaultAllow}}checked{{end}}> <input class="form-check-input" type="checkbox" name="default_allow" id="da" {{if $l.DefaultAllow}}checked{{end}}>
<label class="form-check-label" for="da">Default allow (unmatched IPs are allowed)</label> <label class="form-check-label" for="da">Default allow (unmatched IPs are allowed) &mdash; leave this checked if you only want Basic Auth below and no IP restriction</label>
</div> </div>
</div> </div>
<div class="col-12"> <div class="col-12">