http

Jul 31, 2026

Changes in this version

+ var ErrTLSConfigRequired = errors.New("need both --cert and --key to use a tls:// address")

type Config

+ ResponseHeaders []string

type Middleware

+ func MiddlewareResponseHeaders(headers []*fs.HTTPOption) Middleware

Apr 8, 2026 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Mar 23, 2026 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Mar 6, 2026 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Feb 17, 2026 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Jan 30, 2026 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Dec 10, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Nov 21, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Oct 20, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Sep 24, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Aug 22, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Jul 9, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Jul 23, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Jun 27, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Jun 19, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Jun 17, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Changes in this version

type AuthConfig

+ UserFromHeader string

type Middleware

+ func MiddlewareAuthGetUserFromHeader(header string) Middleware

type Server

+ func (s *Server) Addr() net.Addr

May 21, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

May 1, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Feb 14, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Jan 12, 2025 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Nov 15, 2024 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Sep 24, 2024 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Sep 8, 2024 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Changes in this version

+ var AuthConfigInfo = fs.Options

+ var ConfigInfo = fs.Options

+ var TemplateConfigInfo = fs.Options

Jun 14, 2024 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Mar 10, 2024 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Jan 24, 2024 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Jan 8, 2024 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Nov 26, 2023 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Oct 19, 2023 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Oct 17, 2023 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Sep 11, 2023 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Changes in this version

type Config

+ AllowOrigin string

Jul 17, 2023 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Jun 30, 2023 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Changes in this version

type Middleware

+ func MiddlewareAuthCertificateUser() Middleware

Mar 16, 2023 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Mar 15, 2023 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Mar 14, 2023 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Dec 23, 2022 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Dec 20, 2022 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Changes in this version

+ var Assets embed.FS

+ var AuthHelp = ...

+ var ErrInvalidMinTLSVersion = errors.New("invalid value for --min-tls-version")

+ var ErrTLSBodyMismatch = errors.New("need both TLSCertBody and TLSKeyBody to use TLS")

+ var ErrTLSFileMismatch = errors.New("need both --cert and --key to use TLS")

+ var ErrTLSParseCA = errors.New("unable to parse client certificate authority")

+ var TemplateHelp = ...

+ func AddAuthFlagsPrefix(flagSet *pflag.FlagSet, prefix string, cfg *AuthConfig)

+ func AddHTTPFlagsPrefix(flagSet *pflag.FlagSet, prefix string, cfg *Config)

+ func AddTemplateFlagsPrefix(flagSet *pflag.FlagSet, prefix string, cfg *TemplateConfig)

+ func AfterEpoch(t time.Time) bool

+ func CtxGetAuth(ctx context.Context) interface

+ func CtxGetUser(ctx context.Context) (string, bool)

+ func CtxSetUser(ctx context.Context, value string) context.Context

+ func GetTemplate(tmpl string) (*template.Template, error)

+ func IsAuthenticated(r *http.Request) bool

+ func IsUnixSocket(r *http.Request) bool

+ func NewBaseContext(ctx context.Context, url string) func(l net.Listener) context.Context

+ func PublicURL(r *http.Request) string

+ type AuthConfig struct

+ BasicPass string

+ BasicUser string

+ CustomAuthFn CustomAuthFn

+ HtPasswd string

+ Realm string

+ Salt string

+ func DefaultAuthCfg() AuthConfig

+ func (cfg *AuthConfig) AddFlagsPrefix(flagSet *pflag.FlagSet, prefix string)

+ type Config struct

+ BaseURL string

+ ClientCA string

+ ListenAddr []string

+ MaxHeaderBytes int

+ MinTLSVersion string

+ ServerReadTimeout time.Duration

+ ServerWriteTimeout time.Duration

+ TLSCert string

+ TLSCertBody []byte

+ TLSKey string

+ TLSKeyBody []byte

+ func DefaultCfg() Config

+ func (cfg *Config) AddFlagsPrefix(flagSet *pflag.FlagSet, prefix string)

+ type CustomAuthFn func(user, pass string) (value interface{}, err error)

+ type LoggedBasicAuth struct

+ func NewLoggedBasicAuthenticator(realm string, secrets goauth.SecretProvider) *LoggedBasicAuth

+ func (a *LoggedBasicAuth) CheckAuth(r *http.Request) string

type Middleware

+ func MiddlewareAuthBasic(user, pass, realm, salt string) Middleware

+ func MiddlewareAuthCustom(fn CustomAuthFn, realm string) Middleware

+ func MiddlewareAuthHtpasswd(path, realm string) Middleware

+ func MiddlewareCORS(allowOrigin string) Middleware

+ func MiddlewareStripPrefix(prefix string) Middleware

+ type Option func(*Server)

+ func WithAuth(cfg AuthConfig) Option

+ func WithConfig(cfg Config) Option

+ func WithTemplate(cfg TemplateConfig) Option

type Server

+ func (s *Server) HTMLTemplate() *template.Template

+ func (s *Server) Serve()

+ func (s *Server) URLs() []string

+ func (s *Server) UsingAuth() bool

+ func (s *Server) Wait()

+ type TemplateConfig struct

+ Path string

+ func DefaultTemplateCfg() TemplateConfig

+ func (cfg *TemplateConfig) AddFlagsPrefix(flagSet *pflag.FlagSet, prefix string)

Nov 17, 2022 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Oct 21, 2022 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Changes in this version

type Options

+ MinTLSVersion string

Sep 15, 2022 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Aug 8, 2022 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Jul 9, 2022 GO-2024-3271 +1 more

  GO-2024-3271: Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Apr 29, 2022 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Mar 18, 2022 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Nov 1, 2021 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Changes in this version

type Options

+ SslCertBody []byte

+ SslKeyBody []byte

Oct 1, 2021 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Sep 19, 2021 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Changes in this version

+ func Wait()

Jul 20, 2021 GO-2026-4964

  GO-2026-4964: Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution in github.com/rclone/rclone

Changes in this version

+ var DefaultOpt = Options

+ var Help = ...

+ func AddFlags(flagSet *pflag.FlagSet)

+ func AddFlagsPrefix(flagSet *pflag.FlagSet, prefix string, Opt *Options)

+ func Mount(pattern string, h http.Handler) error

+ func Restart() error

+ func Route(pattern string, fn func(r chi.Router)) (chi.Router, error)

+ func Router() (chi.Router, error)

+ func SetOptions(opt Options)

+ func Shutdown() error

+ func URL() string

+ type Middleware func(http.Handler) http.Handler

+ type Options struct

+ BaseURL string

+ ClientCA string

+ ListenAddr string

+ MaxHeaderBytes int

+ ServerReadTimeout time.Duration

+ ServerWriteTimeout time.Duration

+ SslCert string

+ SslKey string

+ func GetOptions() Options

+ type Server interface

+ Mount func(pattern string, h http.Handler)

+ Route func(pattern string, fn func(r chi.Router)) chi.Router

+ Router func() chi.Router

+ Shutdown func() error

+ func NewServer(listeners, tlsListeners []net.Listener, opt Options) (Server, error)