Page MenuHomePhabricator

Allow public users to make intracluster API requests
ClosedPublic

Authored by epriestley on Apr 13 2016, 11:29 AM.
Tags
None
Referenced Files
F12805419: D15695.id.diff
Wed, Mar 27, 5:17 PM
Unknown Object (File)
Wed, Mar 27, 5:39 AM
Unknown Object (File)
Wed, Mar 27, 5:38 AM
Unknown Object (File)
Sun, Mar 10, 1:55 PM
Unknown Object (File)
Jan 29 2024, 4:18 AM
Unknown Object (File)
Jan 28 2024, 2:39 AM
Unknown Object (File)
Dec 27 2023, 3:21 AM
Unknown Object (File)
Dec 17 2023, 1:16 PM
Subscribers
None

Details

Summary

Ref T10784. On secure, logged-out users currently can't browse repositories when cluster/service mode is enabled because they aren't permitted to make intracluster requests.

We don't allow totally public external requests (they're hard to rate limit and users might write bots that polled feed.query or whatever which we'd have no way to easily disable) but it's fine to allow intracluster public requests.

Test Plan

Browsed a clustered repository while logged out locally.

Diff Detail

Repository
rP Phabricator
Branch
crepo7
Lint
Lint Passed
Unit
Tests Passed
Build Status
Buildable 11688
Build 14633: Run Core Tests
Build 14632: arc lint + arc unit

Event Timeline

epriestley retitled this revision from to Allow public users to make intracluster API requests.
epriestley updated this object.
epriestley edited the test plan for this revision. (Show Details)
epriestley added a reviewer: chad.
chad edited edge metadata.
This revision is now accepted and ready to land.Apr 13 2016, 1:57 PM
epriestley edited edge metadata.
  • Slightly cleaner diff that puts more logic in canEstablishAPISessions().
This revision was automatically updated to reflect the committed changes.