GitLab

(when GET is not allowed).

* Staticcheck fixes

This fixes all staticcheck warnings for this library.

doc: update docs for interface changes

Fix: disallow POST without Origin nor Referer from specific user agents

Addresses browsers being able to POST without control due to things like
https://bugzilla.mozilla.org/show_bug.cgi?id=429594

doc: document command fields

change HandledMethods to AllowGet and cleanup method handling

Allowing methods isn't as simple as just allowing/disallowing them because
different methods do different things.

* HEAD: should be allowed everywhere GET is allowed.
* OPTIONS:
  * When a CORS request is made, this will be handled by the CORS library.
  * Otherewise, we need to return the allowed methods.
* POST: always allowed.
* Everything else: always denied.

Changing HandledMethods to a simple AllowGet makes it easier to "do the right
thing".

remove deprecated log.Warning(f)

Part of the work to unblock: https://github.com/ipfs/go-log/pull/65

http: configurable allowed request methods for the API.

This Handler option is used it to allow/deny request by their method.

The API is an RPC API so it normally should only work with PUT, but we also
use a read-only, GET-based partial API that runs with the gateway.

This commit makes the actual allowed (or handled) methods configurable.

A test is added, and test facilities improved to be able to set/modify
this option.

build(deps): bump github.com/ipfs/go-ipfs-files from 0.0.7 to 0.0.8

Bumps [github.com/ipfs/go-ipfs-files](https://github.com/ipfs/go-ipfs-files) from 0.0.7 to 0.0.8.
- [Release notes](https://github.com/ipfs/go-ipfs-files/releases)
- [Commits](https://github.com/ipfs/go-ipfs-files/compare/v0.0.7...v0.0.8)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

#183 refactored the request options conversion code per the ticket requirements

fix typo

Now options are converted and saved before the request object is generated

fix: normalize options when parsing them

We introduced a bug where we forgot to do this and couldn't find the definition
for the option.

This _also_ fixes (and tests) a bug where we'd allow duplicate flags in some
cases.

feat:add strings option; re-implement file ignore

- first step toward implementing file ignore

feat(file-ignore): implement file ignore

- add flags for providing a gitignore and/or list of files to ignore
- construct a filter to be passed to a SerialFile

feat(file-ignore): use go-ipfs-files fork; use renamed constructor

feat(file-ignore): test case w. ignore rules; refactor parseArgs

feat(file-ignore): ignore-rule opt is open-ended

- make ignore-rules options accept a path to a file
- add test case for ignore rules file

feat(file-ignore): help-text for variardic opts

- show StringsOption as variardic option in help-text
- add test case for variardic option

feat(file-ignore): rename rulesfile opt; fix typos

feat(file-ignore): temp replace of go-ipfs-files

- temporarily using go-ipfs-files fork until go-ipfs-files#26 is merged
- trying to get ci/cd builds working
- will revert before merging

feat(file-ignore): refactor cli/parse.go#setOpts

feat(file-ignore): cleanup parse.go; add test-case

feat(file-ignore): update ignore option copytext

feat(file-ignore): check opt against `optDef.Type`

- revert exclusion of options with `Strings` type,
so those option values are typechecked
- add command test cases

feat(file-ignore): add test-case w. hidden file

feat(file-ignore): build against go-ipfs-files@latest

feat(file-ignore): update go.mod/go.sum

Special-case accepting explicitly supplied named pipes

Chore/remove gx