Skip to content

fix(controller): authenticate custom OPTIONS via OpenWhisk overlay - #24

Merged
sciabarracom merged 1 commit into
apache:mainfrom
miki3421:fix/custom-options-auth-overlay
Nov 4, 2026
Merged

sciabarracom merged 1 commit into
apache:mainfrom
miki3421:fix/custom-options-auth-overlay

Conversation

@miki3421

@miki3421 miki3421 commented Nov 4, 2026

Copy link
Copy Markdown
Contributor

Protected web actions with web-custom-options=true could execute their custom OPTIONS handler without checking require-whisk-auth. Add the complete replacement WebActions.scala to the existing openwhisk-patch overlay so custom OPTIONS requests pass through confirmAuthenticated before action dispatch. Automatic CORS preflight handling that does not execute an action retains its existing behavior.

The added file is byte-for-byte identical to miki3421/openwhisk@fc175dc4443b8fd212ad77d9e8d127b15b41766b, based on the build's unchanged OPENWHISK_HASH=a7ed8b5. Only this overlay file is added; the OpenWhisk version and build tasks stay unchanged.

Validation:

  • Verified the exact source blob and full-file bytes against the fork commit.
  • Applied the overlay using the existing tar replacement mechanism over the pinned upstream file and verified the resulting bytes.
  • git diff --check passes.

No new Scala compilation or full controller build was run for this packaging change.

@sciabarracom
sciabarracom merged commit 4081ec0 into apache:main Nov 4, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants