Files
sencho/backend
Anso 6fc4a43a04 fix(hub-only): enforce hub-only /api/api-tokens/ boundary (#1894)
Add /api/api-tokens/ to HUB_ONLY_PREFIXES. Reuses existing
case-insensitive isHubOnlyPath matcher. Full API-token tests cover
GET/POST/DELETE for both Proxy and Pilot agent modes, plus query-param
(Pilot), mixed-case path, and hub-local CRUD lifecycle using the
created token's returned ID. Existing SSO matrix, disconnected-Pilot,
and mixed-case Secrets regressions are preserved.
2026-09-03 16:21:43 -04:00
..