10 lines
631 B
Plaintext
10 lines
631 B
Plaintext
== through traefik (https://files.enkisfelhom.hu, no files cookie), GET /api/users?id=self
|
|
forged header named X-Felhom-User -> HTTP 401 (user None)
|
|
forged header named RANDOM -> HTTP 401 (user None)
|
|
forged header named SECRET -> HTTP 401 (user None)
|
|
== from the bookstack container (on traefik-public), straight to http://filebrowser:80/api/users?id=self — no traefik
|
|
forged header named X-Felhom-User -> HTTP 401 (user None)
|
|
forged header named RANDOM -> HTTP 401 (user None)
|
|
== CONTROL: the same container with the box's REAL secret name (read from the box, never printed)
|
|
real secret name -> HTTP 200 (user felhom-household)
|