Peter Steinberger
|
223d7dc23d
|
feat(gateway)!: require explicit non-loopback control-ui origins
|
2026-02-24 01:57:11 +00:00 |
|
Peter Steinberger
|
9af3ec92a5
|
fix(gateway): add HSTS header hardening and docs
|
2026-02-23 19:47:29 +00:00 |
|
tyler
|
9b23e5ce1f
|
test: fix flaky auth tests when OPENCLAW_GATEWAY_TOKEN is present
|
2026-02-22 15:17:37 +01:00 |
|
Peter Steinberger
|
b109fa53ea
|
refactor(core): dedupe gateway runtime and config tests
|
2026-02-22 07:44:57 +00:00 |
|
Peter Steinberger
|
d748657265
|
test(gateway): table-drive runtime config validation matrix
|
2026-02-21 23:29:29 +00:00 |
|
Mariano
|
094dbdaf2b
|
fix(gateway): require loopback proxy IP for trusted-proxy + bind=loopback (#22082)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 6ff3ca9b5db530c2ea4abbd027ee98a9c4a1be67
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
|
2026-02-20 18:03:53 +00:00 |
|
Xinhua Gu
|
9c5249714d
|
fix(gateway): trusted-proxy auth rejected when bind=loopback (#20097)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 8de62f1a8f991f900fd1482f64976f234011f4d2
Co-authored-by: xinhuagu <562450+xinhuagu@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
|
2026-02-20 17:51:35 +00:00 |
|
Peter Steinberger
|
08a7967936
|
fix(security): fail closed on gateway bind fallback and tighten canvas IP fallback
|
2026-02-19 14:38:55 +01:00 |
|
Gustavo Madeira Santana
|
c5698caca3
|
Security: default gateway auth bootstrap and explicit mode none (#20686)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: be1b73182cdca9c2331e2113bd1a08b977181974
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-02-19 02:35:50 -05:00 |
|
Nick Taylor
|
1fb52b4d7b
|
feat(gateway): add trusted-proxy auth mode (#15940)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 279d4b304f83186fda44dfe63a729406a835dafa
Co-authored-by: nickytonline <833231+nickytonline@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete
|
2026-02-14 12:32:17 +01:00 |
|