AutopilotMonitor

mirror of https://github.com/okieselbach/AutopilotMonitor.git synced 2026-10-25 13:10:13 +00:00

Files

T

Oliver Kieselbach 43ddc60111 fix(security): enforce tenant suspension in PolicyEnforcementMiddleware, not only auth/me

TenantConfiguration.Disabled/DisabledUntil was checked solely in AuthFunction.BuildAuthResult
(GET /api/auth/me), so a direct REST caller with a valid token kept full read/write access for
the whole suspension window and during an offboarding wipe. DecideAsync now denies 403
TenantSuspended when the caller's home tenant or the request's target tenant is currently
disabled (cached, side-effect-free config read). GA/GlobalReader bypass to administer the
tenant; device/anonymous routes keep their SecurityValidator gate.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-29 22:34:29 +02:00

AuthenticationMiddleware.cs

feat(auth): dual app-reg parallel operation - legacy gktatooine app alongside new C4A8 app

2026-07-31 18:12:25 +02:00

CorrelationIdMiddleware.cs

security hardenings

2026-05-20 19:54:43 +02:00

GlobalExceptionMiddleware.cs

added structured error handler

2026-04-02 22:02:09 +02:00

HttpCompressionStartupFilter.cs

chore: remove legacy V1 agent and its backend ingest path