fix: make http api only accept POST requests

packages/ipfs-http-client/src/lib/core.js

@@ -7,6 +7,7 @@ const { URL } = require('iso-url')
 const parseDuration = require('parse-duration')
 const log = require('debug')('ipfs-http-client:lib:error-handler')
 const HTTP = require('ipfs-utils/src/http')
+const merge = require('merge-options')
 
 const isMultiaddr = (input) => {
   try {
@@ -126,6 +127,19 @@ class Client extends HTTP {
         return out
       }
     })
+
+    delete this.get
+    delete this.put
+    delete this.delete
+    delete this.options
+
+    const fetch = this.fetch
+
+    this.fetch = (resource, options = {}) => {
+      return fetch.call(this, resource, merge(options, {
+        method: 'POST'
+      }))
+    }
   }
 }
 

packages/ipfs/src/http/api/routes/bitswap.js

@@ -4,23 +4,23 @@ const resources = require('../resources')
 
 module.exports = [
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/bitswap/wantlist',
     options: {
       validate: resources.bitswap.wantlist.validate
     },
     handler: resources.bitswap.wantlist.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/bitswap/stat',
     options: {
       validate: resources.bitswap.stat.validate
     },
     handler: resources.bitswap.stat.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/bitswap/unwant',
     options: {
       pre: [

packages/ipfs/src/http/api/routes/block.js

@@ -4,7 +4,7 @@ const resources = require('../resources')
 
 module.exports = [
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/block/get',
     options: {
       pre: [
@@ -14,7 +14,7 @@ module.exports = [
     handler: resources.block.get.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/block/put',
     options: {
       payload: {
@@ -29,7 +29,7 @@ module.exports = [
     handler: resources.block.put.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/block/rm',
     options: {
       pre: [
@@ -40,7 +40,7 @@ module.exports = [
     handler: resources.block.rm.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/block/stat',
     config: {
       pre: [

packages/ipfs/src/http/api/routes/bootstrap.js

@@ -4,12 +4,12 @@ const resources = require('../resources')
 
 module.exports = [
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/bootstrap',
     handler: resources.bootstrap.list
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/bootstrap/add',
     options: {
       pre: [
@@ -19,17 +19,17 @@ module.exports = [
     handler: resources.bootstrap.add.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/bootstrap/add/default',
     handler: resources.bootstrap.addDefault
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/bootstrap/list',
     handler: resources.bootstrap.list
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/bootstrap/rm',
     options: {
       pre: [
@@ -39,7 +39,7 @@ module.exports = [
     handler: resources.bootstrap.rm.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/bootstrap/rm/all',
     handler: resources.bootstrap.rmAll
   }

packages/ipfs/src/http/api/routes/config.js

@@ -4,7 +4,7 @@ const resources = require('../resources')
 
 module.exports = [
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/config/{key?}',
     options: {
       pre: [
@@ -14,12 +14,12 @@ module.exports = [
     handler: resources.config.getOrSet.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/config/show',
     handler: resources.config.show
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/config/replace',
     options: {
       payload: {
@@ -33,7 +33,7 @@ module.exports = [
     handler: resources.config.replace.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/config/profile/apply',
     options: {
       pre: [
@@ -44,7 +44,7 @@ module.exports = [
     handler: resources.config.profiles.apply.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/config/profile/list',
     handler: resources.config.profiles.list.handler
   }

packages/ipfs/src/http/api/routes/debug.js

@@ -9,7 +9,7 @@ const gauge = new client.Gauge({ name: 'number_of_peers', help: 'the_number_of_c
 
 // Endpoint for handling debug metrics
 module.exports = {
-  method: 'GET',
+  method: 'POST',
   path: '/debug/metrics/prometheus',
   async handler (request, h) {
     if (!process.env.IPFS_MONITORING) {

packages/ipfs/src/http/api/routes/dht.js

@@ -4,39 +4,39 @@ const resources = require('../resources')
 
 module.exports = [
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/dht/findpeer',
     options: {
       validate: resources.dht.findPeer.validate
     },
     handler: resources.dht.findPeer.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/dht/findprovs',
     options: {
       validate: resources.dht.findProvs.validate
     },
     handler: resources.dht.findProvs.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/dht/get',
     options: {
       validate: resources.dht.get.validate
     },
     handler: resources.dht.get.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/dht/provide',
     options: {
       validate: resources.dht.provide.validate
     },
     handler: resources.dht.provide.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/dht/put',
     options: {
       pre: [
@@ -47,7 +47,7 @@ module.exports = [
     handler: resources.dht.put.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/dht/query',
     options: {
       validate: resources.dht.query.validate

packages/ipfs/src/http/api/routes/dns.js

@@ -3,7 +3,7 @@
 const resources = require('../resources')
 
 module.exports = {
-  method: '*',
+  method: 'POST',
   path: '/api/v0/dns',
   handler: resources.dns
 }

packages/ipfs/src/http/api/routes/files-regular.js

@@ -4,8 +4,7 @@ const resources = require('../resources')
 
 module.exports = [
   {
-    // TODO fix method
-    method: '*',
+    method: 'POST',
     path: '/api/v0/cat',
     options: {
       pre: [
@@ -15,8 +14,7 @@ module.exports = [
     handler: resources.filesRegular.cat.handler
   },
   {
-    // TODO fix method
-    method: '*',
+    method: 'POST',
     path: '/api/v0/get',
     options: {
       pre: [
@@ -26,8 +24,7 @@ module.exports = [
     handler: resources.filesRegular.get.handler
   },
   {
-    // TODO fix method
-    method: '*',
+    method: 'POST',
     path: '/api/v0/add',
     options: {
       payload: {
@@ -40,8 +37,7 @@ module.exports = [
     handler: resources.filesRegular.add.handler
   },
   {
-    // TODO fix method
-    method: '*',
+    method: 'POST',
     path: '/api/v0/ls',
     options: {
       pre: [
@@ -51,8 +47,7 @@ module.exports = [
     handler: resources.filesRegular.ls.handler
   },
   {
-    // TODO fix method
-    method: '*',
+    method: 'POST',
     path: '/api/v0/refs',
     options: {
       pre: [
@@ -63,8 +58,7 @@ module.exports = [
     handler: resources.filesRegular.refs.handler
   },
   {
-    // TODO fix method
-    method: '*',
+    method: 'POST',
     path: '/api/v0/refs/local',
     handler: resources.filesRegular.refs.local.handler
   }

packages/ipfs/src/http/api/routes/id.js

@@ -3,7 +3,7 @@
 const resources = require('../resources')
 
 module.exports = {
-  method: '*',
+  method: 'POST',
   path: '/api/v0/id',
   handler: resources.id.get
 }

packages/ipfs/src/http/api/routes/key.js

@@ -4,32 +4,32 @@ const resources = require('../resources')
 
 module.exports = [
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/key/list',
     handler: resources.key.list
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/key/gen',
     handler: resources.key.gen
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/key/rm',
     handler: resources.key.rm
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/key/rename',
     handler: resources.key.rename
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/key/export',
     handler: resources.key.export
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/key/import',
     handler: resources.key.import
   }

packages/ipfs/src/http/api/routes/name.js

@@ -4,33 +4,33 @@ const resources = require('../resources')
 
 module.exports = [
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/name/resolve',
     options: {
       validate: resources.name.resolve.validate
     },
     handler: resources.name.resolve.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/name/publish',
     options: {
       validate: resources.name.publish.validate
     },
     handler: resources.name.publish.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/name/pubsub/state',
     handler: resources.name.pubsub.state.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/name/pubsub/subs',
     handler: resources.name.pubsub.subs.handler
   },
   {
-    method: '*',
+    method: 'POST',
     path: '/api/v0/name/pubsub/cancel',
     options: {
       validate: resources.name.pubsub.cancel.validate