wizardchen c65ffa3d9c fix(api-keys): enforce scope from request context after attach ...

Use c.Request.Context() in authenticateAPIKeyRequest so scoped keys are
actually restricted, update dto tests for removed tenant.api_key, and add
a regression test for the attach-context contract.

2026-07-07 12:00:13 +08:00

..

auth_test.go

fix(api-keys): enforce scope from request context after attach

2026-07-07 12:00:13 +08:00

auth.go

fix(security): redact secrets in login and tenant KV update responses

2026-07-02 14:41:42 +08:00

datasource_test.go

fix(datasource): harden RSS connector and editor UX after review

2026-06-23 17:30:38 +08:00

datasource.go

fix(datasource): harden RSS connector and editor UX after review

2026-06-23 17:30:38 +08:00

mcp_test.go

fix(security): harden secret redaction follow-ups for PR #1884

2026-07-02 14:41:42 +08:00

mcp.go

fix(security): harden secret redaction follow-ups for PR #1884

2026-07-02 14:41:42 +08:00

model_test.go

fix(security): harden secret redaction follow-ups for PR #1884

2026-07-02 14:41:42 +08:00

model.go

fix(security): harden secret redaction follow-ups for PR #1884

2026-07-02 14:41:42 +08:00

role.go

fix(security): close init config and parser-check redaction gaps

2026-07-02 14:41:42 +08:00

tenant_test.go

fix(api-keys): enforce scope from request context after attach

2026-07-07 12:00:13 +08:00

tenant.go

feat: add scoped tenant api keys

2026-07-07 12:00:13 +08:00

test_helpers.go

fix(security): redact integration secrets from viewer-accessible endpoints

2026-07-02 14:41:42 +08:00

web_search_provider_test.go

fix(security): redact integration secrets from viewer-accessible endpoints

2026-07-02 14:41:42 +08:00

web_search_provider.go

fix(security): redact integration secrets from viewer-accessible endpoints

2026-07-02 14:41:42 +08:00