Skip to content

Conversation

@joeyliechty
Copy link
Contributor

No description provided.

jeroenhoffman and others added 10 commits May 2, 2022 15:44
(cherry picked from commit a227cec)
Add support for bypassing IP filtering when a preview-token query parameter
is present in the request. This resolves CLIENT-1046 where preview URLs
were being blocked by the IP filter.

Implementation Details:
- Add CONFIG_PREVIEW_TOKEN_ENABLED and PREVIEW_TOKEN_PARAM_NAME constants
- Add previewTokenEnabled field to AuthObject for configuration
- Load preview-token-enabled boolean from JCR configuration (defaults to false)
- Check for preview-token query parameter in isIgnored() method
- If enabled and token is present, bypass IP filtering with debug logging
- Change isIgnored() visibility to protected for testability

Testing:
- Added 4 comprehensive unit tests covering all scenarios:
  - Preview token bypasses filter when enabled
  - Preview token is ignored when disabled
  - Missing token does not bypass filter
  - Empty token does not bypass filter
- All existing tests pass (8 total)

Fixes: FORGE-486, CLIENT-1046
🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants