Nick Steel
10fafc0228
http: Add config option to control CSRF protection ( Fixes : #1713 )
...
Allows users to disable CSRF protection and revert to the HTTP server's
previous (less secure) behaviour. Users are advised to leave this config
value enabled if possible. However, if disabled this will:
* Remove the requirement to set a ``Content-Type: application/json``
header for JSON-RPC POST requests.
* Disable all same-origin checks, effectively ignoring the ``allowed_origins``
config since requests from any origin will be allowed.
* Suppress all ``Access-Control-Allow-*`` response headers.
2018-10-15 17:24:45 +01:00
Nick Steel
1d6e081171
docs: mention that same-origin requests are always allowed.
2018-04-15 17:26:16 +01:00
Nick Steel
51741a7cbc
HTTP: Apply allowed_origins to Websocket requests also.
2018-04-15 17:14:13 +01:00
Nick Steel
7caba4a05d
docs: improved http/allowed_origins description.
2018-04-15 17:12:16 +01:00
Nick Steel
ecb5a7038a
docs: http/allowed_origins config setting description
2018-04-15 17:12:16 +01:00
Nick
014272cae9
Fix spelling mistake
...
Replace "takes care or user authentication" with "takes care of user authentication".
2017-06-19 16:43:06 +02:00
Stein Magnus Jodal
0034545351
http: Deprecate http/static_dir config
2015-03-14 20:43:34 +01:00
Nick Steel
839108e7c5
docs: typo in Mopidy-HTTP
2014-09-21 22:49:27 +01:00
Stein Magnus Jodal
713bca384a
docs: Update Mopidy-HTTP docs wrt the HTTP server-side API
2014-09-21 23:26:24 +02:00
Stein Magnus Jodal
f58db4a766
docs: Improve HTTP extension docs
2014-05-14 23:30:10 +02:00
dz0ny
f1d1a4713b
Squashed commit of the following:
...
commit dbb7005aa866cdc337bde9c8169e9bf15e5c8042
Author: dz0ny <dz0ny@ubuntu.si>
Date: Sun May 11 22:12:58 2014 +0200
Fix: Make PR mergable
commit 5bb27da72c4276a930bf33955e6583f6781d23f6
Author: dz0ny <dz0ny@ubuntu.si>
Date: Thu May 8 23:31:54 2014 +0200
Add: helper method for extensin url
commit 8a348b26b65102084a606ff73384a478bb785cf1
Author: dz0ny <dz0ny@ubuntu.si>
Date: Thu May 8 00:35:50 2014 +0200
Add: Refactor ws and rpc to handlers, reuse code
commit 677c809d2b39a6c982ab835368fdb8a3ad9d1a92
Author: dz0ny <dz0ny@ubuntu.si>
Date: Thu May 8 00:18:10 2014 +0200
Fix: Return proper HTTP headers
commit fe5fea2fc2a0d28a39532d6d4cd2b21013d57d24
Author: dz0ny <dz0ny@ubuntu.si>
Date: Wed May 7 23:48:19 2014 +0200
Add: RPC post handler
Add: tests for http post handler
commit e77e60310853b368758b09b303a96a95ff1b9b93
Author: dz0ny <dz0ny@ubuntu.si>
Date: Sun May 4 22:15:04 2014 +0200
Add: Documentation on how to extend http api
commit a3a14fb5d15f095e5bab23a590e0a8360a039f9a
Author: dz0ny <dz0ny@ubuntu.si>
Date: Sun May 4 19:48:34 2014 +0200
Add: HTTP tests for default router and static handler
commit 0d9544256bcb8f048eaedb5cdd57b1de027d387b
Author: dz0ny <dz0ny@ubuntu.si>
Date: Sun May 4 15:44:32 2014 +0200
Fix: Move StaticFileHandler to main http package
commit c83c9f661e658e4a843dc5c8c6ba5dc3f1ea9c1e
Author: dz0ny <dz0ny@ubuntu.si>
Date: Sun May 4 15:29:49 2014 +0200
Add: default Router implementation
commit 258cb7210bdf13833884c04cfb7fb4fa704394a7
Author: dz0ny <dz0ny@ubuntu.si>
Date: Sun May 4 15:00:46 2014 +0200
Add: Switch to registry for router registration
commit b7bfe7b814235b030d7ac30de90e2331e3d809d3
Author: dz0ny <dz0ny@ubuntu.si>
Date: Sat May 3 21:52:58 2014 +0200
Fix: Private methods
Fix: Point to mopidy.html instead main.html
Fix: Less noise in console
commit 232abe3029e93f78ce25db0c1bd44743cc23ed2d
Author: dz0ny <dz0ny@ubuntu.si>
Date: Sat May 3 21:32:07 2014 +0200
Fix: Start IOLoop in separate thread, so actor can stop it
commit d686892c2fa993cbedc99c8e8e7f9c961ac6f35a
Author: dz0ny <dz0ny@ubuntu.si>
Date: Sat May 3 19:30:49 2014 +0200
Fix: Router load order
Fix: JS helper library WSS default url
Add: Handlers from extensions
commit a1b0f5673a6719f229df27feccb284324675e9d1
Author: dz0ny <dz0ny@ubuntu.si>
Date: Sat May 3 14:53:30 2014 +0200
Add: Switch to Tornado framework
2014-05-12 14:54:50 +02:00
Stein Magnus Jodal
2979de0f94
http: Polish Mopidy-HTTP Zeroconf service
...
Builds upon #725 to:
- Remove extra config for Mopidy-HTTP Zeroconf service
- Refactor Zeroconf setup code in the HTTP frontend a bit
- Add documentation
2014-05-06 23:20:14 +02:00
Stein Magnus Jodal
cc8bf67641
docs: More prose and less headers in ext docs
2014-01-11 21:05:21 +01:00
Stein Magnus Jodal
621aff22c9
http: Move mopidy.{frontends => }.http
2013-12-31 14:04:25 +01:00
Stein Magnus Jodal
8295dd4f4a
requirements: Fold http.txt into Mopidy-HTTP docs
2013-12-06 10:23:29 +01:00
Stein Magnus Jodal
d2280d9a86
docs: Add {mpd,http}/zeroconf descriptions
2013-11-11 22:52:36 +01:00
Stein Magnus Jodal
b300924e2b
docs: Link from HTTP ext to HTTP clients page
2013-04-12 21:50:14 +02:00
Stein Magnus Jodal
69c2a2d32c
docs: Reorder default config and confval descriptions
2013-04-12 21:50:14 +02:00
Stein Magnus Jodal
0e9da33147
docs: Move HTTP to ext registry and API section
2013-04-11 23:25:57 +02:00