Anso ef164f0e5b fix: enforce the originating user's role on remote WebSocket connections (#1508) ...

A remote WebSocket upgrade was forwarded to the target node before any role
check, and the forwarder authenticates the connection to the remote as an
admin-gated console_session. A non-admin could therefore open a remote
container-exec or host-console socket that the local handlers reject.

The hub now applies the same gate before forwarding: logs and notifications
stay open to any authenticated user, every other path (container exec, host
console) is admin-only, and machine node_proxy tokens are rejected on the
interactive paths. This covers proxy-mode and pilot-agent remotes, which share
the forward path.

2026-06-28 18:21:13 -04:00

..

__tests__

fix: enforce the originating user's role on remote WebSocket connections (#1508)

2026-06-28 18:21:13 -04:00

bootstrap

feat(security): action-posture Security dashboard with exploit intel and triage (#1424)

2026-06-23 17:42:11 -04:00

cli

feat(recovery): add safe-mode recovery surface and emergency CLI (#1286)

2026-06-02 16:11:24 -04:00

helpers

fix: bind fleet stop-by-label to the exact confirmed nodes and stacks (#1506)

2026-06-28 16:33:01 -04:00

mesh

fix(mesh): close data-plane race that dropped early TcpData frames (#1086)

2026-05-17 14:01:39 -04:00

middleware

fix: enforce the signed-in user's role on cross-node proxied requests (#1505)

2026-06-28 16:32:50 -04:00

pilot

fix(nodes): gate node-management actions by role and release pilot tunnels on delete (#1280)

2026-06-02 09:51:42 -04:00

proxy

fix: enforce the signed-in user's role on cross-node proxied requests (#1505)

2026-06-28 16:32:50 -04:00

routes

fix: require node:read for fleet topology reads and hide Fleet without it (#1507)

2026-06-28 16:39:11 -04:00

services

fix: enforce the signed-in user's role on cross-node proxied requests (#1505)

2026-06-28 16:32:50 -04:00

types

feat(pricing): collapse to two tiers (#1309)

2026-06-04 17:45:53 -04:00

utils

fix: name matched risk inputs in policy block messages (#1471)

2026-06-26 15:34:24 -04:00

websocket

fix: enforce the originating user's role on remote WebSocket connections (#1508)

2026-06-28 18:21:13 -04:00

app.ts

fix(http): strip zstd from Accept-Encoding so compression sets Content-Encoding (#1092)

2026-05-17 20:11:44 -04:00

index.ts

feat: Compose Network Inspector and exposure intent guard (#1360)

2026-06-12 02:15:11 -04:00

server.ts

fix(pilot): harden outbound reverse-tunnel against resource exhaustion (#979)

2026-05-07 21:28:35 -04:00