Add Gateway.APICommands for /api allowlists

Author: Lars Gierth

gateway.go

@@ -6,4 +6,5 @@ type Gateway struct {
 	RootRedirect string
 	Writable     bool
 	PathPrefixes []string
+	APICommands  []string
 }

init.go

@@ -66,6 +66,7 @@ func Init(out io.Writer, nBitsForKeypair int) (*Config, error) {
 				"Access-Control-Allow-Methods": []string{"GET"},
 				"Access-Control-Allow-Headers": []string{"X-Requested-With", "Range"},
 			},
+			APICommands: DefaultGatewayAPICommands(),
 		},
 		Reprovider: Reprovider{
 			Interval: "12h",
@@ -96,6 +97,28 @@ const DefaultConnMgrLowWater = 600
 // grace period
 const DefaultConnMgrGracePeriod = time.Second * 20
 
+func DefaultGatewayAPICommands() []string {
+	return []string{
+		"commands",
+		"cat",
+		"get",
+		"ls",
+		"resolve",
+		"name/resolve",
+		"dag/get",
+		"dag/resolve",
+		"object/data",
+		"object/links",
+		"object/get",
+		"object/stat",
+		"refs",
+		"block/stat",
+		"block/get",
+		"dns",
+		"version",
+	}
+}
+
 func addressesConfig() Addresses {
 	return Addresses{
 		Swarm: []string{