molecule-ai[bot] 112c17510c fix(security): revert #684 schema migration, restore /admin/schedules/health, add ADR-001 ... Required changes from security auditor before PR #696 can merge: 1. REVERT #684 (token_type schema migration): - Remove migration 029_token_type.{up,down}.sql - Revert wsauth/tokens.go — remove IssueAdminToken, token_type constants, restore HasAnyLiveTokenGlobal and ValidateAnyToken to pre-#684 behavior - Revert admin_test_token.go to use IssueToken (not IssueAdminToken) - Revert associated tests to pre-#684 patterns Path B: formal risk acceptance documented in ADR-001. 2. RESTORE /admin/schedules/health route (regression fix): - Add platform/internal/handlers/admin_schedules_health.go (from PR #671) - Add platform/internal/handlers/admin_schedules_health_test.go (from PR #671) - Wire GET /admin/schedules/health via AdminAuth in router.go 3. ADD ADR-001 (platform/docs/adr/ADR-001-admin-token-scope.md): - Documents #684 as known risk with Phase-H remediation plan - Phase-H tracking issue: Molecule-AI/molecule-core#710		2026-04-17 12:01:12 +00:00
..
ratelimit_test.go	fix(router): call SetTrustedProxies(nil) to close IP-spoofing bypass (#179)	2026-04-15 17:32:54 +00:00
ratelimit.go	fix: #93 category_routing + #105 X-RateLimit headers	2026-04-15 00:23:46 -07:00
securityheaders_test.go	fix(platform): pin X-Content-Type-Options nosniff + add /orgs API prefix (#614)	2026-04-17 06:02:18 +00:00
securityheaders.go	fix(platform): pin X-Content-Type-Options nosniff + add /orgs API prefix (#614)	2026-04-17 06:02:18 +00:00
tenant_guard_test.go	fix(auth): TenantGuard same-origin bypass for EC2 tenant Canvas	2026-04-16 18:22:23 -07:00
tenant_guard.go	fix(auth): TenantGuard same-origin bypass for EC2 tenant Canvas	2026-04-16 18:22:23 -07:00
wsauth_middleware_test.go	fix(security): revert #684 schema migration, restore /admin/schedules/health, add ADR-001	2026-04-17 12:01:12 +00:00
wsauth_middleware.go	Merge pull request #628 from Molecule-AI/fix/issue-623-adminauth-origin-bypass	2026-04-17 06:13:33 +00:00