Hongming Wang 00ef832e33 Merge pull request #729 from Molecule-AI/fix/issue-684-adminauth-bearer-scope ... fix(auth): AdminAuth rejects workspace bearer tokens when ADMIN_TOKEN is set (#684)		2026-04-17 08:17:11 -07:00
..
ratelimit_test.go	fix(router): call SetTrustedProxies(nil) to close IP-spoofing bypass (#179)	2026-04-15 17:32:54 +00:00
ratelimit.go	fix: #93 category_routing + #105 X-RateLimit headers	2026-04-15 00:23:46 -07:00
securityheaders_test.go	fix(platform): pin X-Content-Type-Options nosniff + add /orgs API prefix (#614)	2026-04-17 06:02:18 +00:00
securityheaders.go	fix(platform): pin X-Content-Type-Options nosniff + add /orgs API prefix (#614)	2026-04-17 06:02:18 +00:00
tenant_guard_test.go	fix(auth): TenantGuard same-origin bypass for EC2 tenant Canvas	2026-04-16 18:22:23 -07:00
tenant_guard.go	fix(auth): TenantGuard same-origin bypass for EC2 tenant Canvas	2026-04-16 18:22:23 -07:00
wsauth_middleware_test.go	Merge pull request #729 from Molecule-AI/fix/issue-684-adminauth-bearer-scope	2026-04-17 08:17:11 -07:00
wsauth_middleware.go	fix(auth): tighten AdminAuth to reject workspace bearer tokens when ADMIN_TOKEN is set (#684)	2026-04-17 15:08:54 +00:00