feat(auth): support http auth and ip whitelist on wildcard subdomains and alias domains - #57

Merged

mrrobot47 merged 30 commits into

EasyEngine:developfrom

mrrobot47:feat/wildcard-auth

Sep 25, 2026

Commits on Jan 8, 2026

Add wildcard htpasswd support for multisite subdomains and alias domains
mrrobot47
committed
3c986e1
Fix duplicate domain entries in htpasswd file generation
mrrobot47
committed
e697bb2
Add wildcard and alias domain support to whitelist generation
mrrobot47
committed
5589921
Skip *.site_url alias only for subdomain multisites
mrrobot47
committed
3e7027c
Add explicit handling for empty auth/whitelist arrays
mrrobot47
committed
63ac4fa
Clean up wildcard files upfront to handle site type changes
mrrobot47
committed
569ed56

Commits on Sep 24, 2026

refactor(auth): share site domain collection and file generation
mrrobot47
committed
6bd97cc
fix(auth): don't generate _wildcard files for plain alias domains
mrrobot47
committed
f2b9b11
fix(auth): don't remove _wildcard files the site doesn't own
mrrobot47
committed
5a3cf0e
fix(auth): remove site files when the site has no own entries
mrrobot47
committed
5f12c49
fix(auth): escape arguments of the htpasswd command
mrrobot47
committed
dfa56f0
fix(auth): remove all of a site's auth and ACL files on delete
mrrobot47
committed
852c10b
feat(auth): sync auth files when alias domains change
mrrobot47
committed
e0778d3
fix(auth): skip unsafe alias names and guard auth file removal
mrrobot47
committed
fa6c6b1
perf(auth): write a site's htpasswd file once and copy it to its other domains
mrrobot47
committed
a9572ff
fix(auth): keep htpasswd credentials out of ee.log
mrrobot47
committed
3f59e38
fix(auth): protect alias domains before the proxy serves them
mrrobot47
committed
88a1fb9
fix(auth): reload the proxy on site cleanup only when something was removed
mrrobot47
committed
bbe88ac
refactor(auth): look up sites with Site::find() when regenerating global files
mrrobot47
committed
dc373d8
feat(auth): regenerate site auth files on upgrade
mrrobot47
committed
ced81fa
refactor(auth): keep the global auth file names in one constant
mrrobot47
committed
6de4d78
fix(auth): protect alias domains that contain underscores
mrrobot47
committed
9b3cd1f
fix(auth): replace htpasswd files atomically
mrrobot47
committed
1a34106
fix(auth): keep htpasswd usernames out of ee.log
mrrobot47
committed
1ea9bef
refactor(auth): generate files for alias domains being added with the site's generators
mrrobot47
committed
3a5d2f6
fix(auth): copy a site's existing htpasswd file to its other domains when it can't be rewritten
mrrobot47
committed
510f8cc
docs(auth): say the auth files migration needs the new nginx-proxy image
mrrobot47
committed
cf073e7
fix(auth): use site-command's alias domain rule
mrrobot47
committed
cbf7d11
fix(auth): keep the global htpasswd file until its replacement is written
mrrobot47
committed
d313f5e
fix(auth): copy auth files to a site's other domains atomically
mrrobot47
committed
329faee

Navigation Menu

feat(auth): support http auth and ip whitelist on wildcard subdomains and alias domains - #57

feat(auth): support http auth and ip whitelist on wildcard subdomains and alias domains#57
mrrobot47 merged 30 commits into
EasyEngine:developfrom
mrrobot47:feat/wildcard-auth

Commits on Jan 8, 2026

Add wildcard htpasswd support for multisite subdomains and alias domains

Fix duplicate domain entries in htpasswd file generation

Add wildcard and alias domain support to whitelist generation

Skip *.site_url alias only for subdomain multisites

Add explicit handling for empty auth/whitelist arrays

Clean up wildcard files upfront to handle site type changes

Commits on Sep 24, 2026

refactor(auth): share site domain collection and file generation

fix(auth): don't generate _wildcard files for plain alias domains

fix(auth): don't remove _wildcard files the site doesn't own

fix(auth): remove site files when the site has no own entries

fix(auth): escape arguments of the htpasswd command

fix(auth): remove all of a site's auth and ACL files on delete

feat(auth): sync auth files when alias domains change

fix(auth): skip unsafe alias names and guard auth file removal

perf(auth): write a site's htpasswd file once and copy it to its other domains

fix(auth): keep htpasswd credentials out of ee.log

fix(auth): protect alias domains before the proxy serves them

fix(auth): reload the proxy on site cleanup only when something was removed

refactor(auth): look up sites with Site::find() when regenerating global files

feat(auth): regenerate site auth files on upgrade

refactor(auth): keep the global auth file names in one constant

fix(auth): protect alias domains that contain underscores

fix(auth): replace htpasswd files atomically

fix(auth): keep htpasswd usernames out of ee.log

refactor(auth): generate files for alias domains being added with the site's generators

fix(auth): copy a site's existing htpasswd file to its other domains when it can't be rewritten

docs(auth): say the auth files migration needs the new nginx-proxy image

fix(auth): use site-command's alias domain rule

fix(auth): keep the global htpasswd file until its replacement is written

fix(auth): copy auth files to a site's other domains atomically