rcourtman 822eac9789 Deliver websocket events only to the organization that owns them ...

The hub kept tenant-scoped delivery for state and alerts, but every
other event went through Broadcast/BroadcastMessage, which sent to all
connected clients. In a multi-tenant install a member of one
organization therefore received another organization's discovery
progress, discovered servers (addresses, ports, versions, hostnames),
node auto-registration and node-change events.

Discovery now carries the org of the monitor that owns it, and setup
and node handlers send through BroadcastMessageToTenant with the
request's org (the setup token's org for auto-registration). The
global BroadcastMessage accepts only instance-wide types (ping,
settingsUpdate, update:progress) and refuses everything else, so a new
caller cannot leak by default. Legacy clients without an org are
registered under the default tenant, so single-org installs receive
these events as before. The unused unscoped alert wrappers are removed.

2026-10-17 09:05:56 +01:00

..

config_override_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

config_override.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

service_event_tenant_test.go

Deliver websocket events only to the organization that owns them

2026-10-17 09:05:56 +01:00

service_test.go

Deliver websocket events only to the organization that owns them

2026-10-17 09:05:56 +01:00

service.go

Deliver websocket events only to the organization that owns them

2026-10-17 09:05:56 +01:00