mirror of
https://github.com/distribution/distribution.git
synced 2026-07-17 02:00:41 +00:00
bind proxy-mode bearer realms to the upstream trust boundary before sending credentials, move challenge filtering behind the auth manager, and use golang.org/x/net/publicsuffix for registrable-domain handling.