[PR #5285] [MERGED] vhost/http: fix auth bypass when routeByHTTPUser is used with proxy-style requests #5227

New issue

Closed

opened 2026-05-05 14:57:04 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 14:57:04 -06:00

Owner

📋 Pull Request Information

Original PR: https://github.com/fatedier/frp/pull/5285
Author: @fatedier
Created: 4/13/2026
Status: ✅ Merged
Merged: 4/13/2026
Merged by: @fatedier

Base: dev ← Head: new

📝 Commits (1)

232946b vhost/http: fix auth bypass when routeByHTTPUser is used with proxy-style requests

📊 Changes

5 files changed (+220 additions, -24 deletions)

View changed files

📝 Release.md (+3 -1)
📝 pkg/util/version/version.go (+1 -1)
📝 pkg/util/vhost/http.go (+41 -22)
➕ pkg/util/vhost/http_test.go (+102 -0)
📝 test/e2e/v1/basic/http.go (+73 -0)

📄 Description

No description provided

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fatedier/frp/pull/5285 **Author:** [@fatedier](https://github.com/fatedier) **Created:** 4/13/2026 **Status:** ✅ Merged **Merged:** 4/13/2026 **Merged by:** [@fatedier](https://github.com/fatedier) **Base:** `dev` ← **Head:** `new` --- ### 📝 Commits (1) - [`232946b`](https://github.com/fatedier/frp/commit/232946b0968fee5e56b547a21cf14fb47a72ee51) vhost/http: fix auth bypass when routeByHTTPUser is used with proxy-style requests ### 📊 Changes **5 files changed** (+220 additions, -24 deletions) <details> <summary>View changed files</summary> 📝 `Release.md` (+3 -1) 📝 `pkg/util/version/version.go` (+1 -1) 📝 `pkg/util/vhost/http.go` (+41 -22) ➕ `pkg/util/vhost/http_test.go` (+102 -0) 📝 `test/e2e/v1/basic/http.go` (+73 -0) </details> ### 📄 Description _No description provided_ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>