anonpenguin23 7b5587094d fix(gateway): api_key owners no longer 403 on namespaces they own ...

The namespace-ownership middleware compared an api_key caller's RAW key
against namespace_ownership.owner_id, but api_keys are stored HMAC-hashed
(HashAPIKey). So every api_key-authenticated owner got a 403 on a namespace
they actually own — blocking function deploy and PUT /v1/push/config.

Hash the presented api_key before the ownership comparison (hashed first,
raw second as a rolling-upgrade legacy fallback), mirroring the existing
lookupAPIKeyNamespace pattern. The wallet path is unchanged (wallets stored
raw). Security-reviewed: grants only to the correct key holder, no
escalation.

2026-06-15 11:20:23 +03:00

..

auth

fix(auth): bounded single-use refresh-token reuse grace (#125)

2026-06-12 17:42:36 +03:00

ctxkeys

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

handlers

feat(gateway): enforce jwt expiry on persistent websockets

2026-06-12 10:12:21 +03:00

acme_handler.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

anon_proxy_handler_test.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

anon_proxy_handler.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

cache_handlers_test.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

circuit_breaker.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

claims_provider_test.go

feat(auth): refresh-token custom claims hook (#548)

2026-06-12 08:05:27 +03:00

claims_provider.go

feat(auth): refresh-token custom claims hook (#548)

2026-06-12 08:05:27 +03:00

config_validate_test.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

config_validate.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

config.go

feat(serverless): add raw http response mode and secrets encryption

2026-06-09 13:01:02 +03:00

connlimit.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

context.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

dependencies_dsn_test.go

fix(gateway): update rqlite consistency level and improve column mapping

2026-05-12 09:13:03 +03:00

dependencies.go

feat(gateway): implement ntfy cluster fan-out and improve secrets encryption

2026-06-13 09:23:14 +03:00

gateway.go

feat(gateway): implement stealth TURN discovery and configuration

2026-06-11 07:04:50 +03:00

http_gateway.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

http_helpers.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

https.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

instance_spawner_test.go

feat(gateway): implement persistent secrets and webrtc configuration

2026-06-10 12:10:52 +03:00

instance_spawner.go

feat(gateway): implement stealth TURN discovery and configuration

2026-06-11 07:04:50 +03:00

internal_auth_test.go

feat(gateway): implement self-service tenant push notifications

2026-05-08 11:23:53 +03:00

jwt_test.go

feat(auth): refresh-token custom claims hook (#548)

2026-06-12 08:05:27 +03:00

lifecycle.go

feat(gateway): implement pubsub dispatcher and batch query support

2026-05-17 16:27:05 +03:00

middleware_apikey_owner_test.go

fix(gateway): api_key owners no longer 403 on namespaces they own

2026-06-15 11:20:23 +03:00

middleware_cache_test.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

middleware_cache.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

middleware_test.go

feat(gateway): fix WebRTC config persistence and endpoint access

2026-05-30 14:39:39 +03:00

middleware_ws_jwt_test.go

feat(auth): refresh-token custom claims hook (#548)

2026-06-12 08:05:27 +03:00

middleware.go

fix(gateway): api_key owners no longer 403 on namespaces they own

2026-06-15 11:20:23 +03:00

namespace_health.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

namespace_helpers.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

network_handlers.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

peer_discovery_test.go

fix(gateway,serverless): libp2p mesh peer-port + system-trigger auth bypass

2026-05-16 15:43:18 +03:00

peer_discovery.go

fix(gateway,serverless): libp2p mesh peer-port + system-trigger auth bypass

2026-05-16 15:43:18 +03:00

proxy_timeout_test.go

docs: update deployment and serverless documentation

2026-05-07 07:33:52 +03:00

pubsub_handlers_test.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

push_fanout_test.go

feat(gateway): implement ntfy cluster fan-out and improve secrets encryption

2026-06-13 09:23:14 +03:00

push_fanout.go

feat(gateway): implement ntfy cluster fan-out and improve secrets encryption

2026-06-13 09:23:14 +03:00

push_notifications.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

push_routes_test.go

docs: update deployment and serverless documentation

2026-05-07 07:33:52 +03:00

push_routes.go

feat(#72): full-privacy push — self-hosted ntfy + APNs-direct provider

2026-05-14 10:48:00 +03:00

rate_limiter_middleware_test.go

feat: per-namespace rate-limit self-service + WS JWT auth + release 0.122.12

2026-05-13 15:41:36 +03:00

rate_limiter_test.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

rate_limiter.go

feat: per-namespace rate-limit self-service + WS JWT auth + release 0.122.12

2026-05-13 15:41:36 +03:00

ratelimit_routes.go

feat: per-namespace rate-limit self-service + WS JWT auth + release 0.122.12

2026-05-13 15:41:36 +03:00

request_log_batcher.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

routes.go

feat(gateway): implement stealth TURN discovery and configuration

2026-06-11 07:04:50 +03:00

rqlite_backup_handler_test.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

rqlite_backup_handler.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

schema_status_handler_test.go

docs: update deployment and serverless documentation

2026-05-07 07:33:52 +03:00

schema_status_handler.go

docs: update deployment and serverless documentation

2026-05-07 07:33:52 +03:00

secrets_key_test.go

feat(gateway): implement ntfy cluster fan-out and improve secrets encryption

2026-06-13 09:23:14 +03:00

secrets_key.go

feat(gateway): implement ntfy cluster fan-out and improve secrets encryption

2026-06-13 09:23:14 +03:00

serverless_handlers_test.go

feat(cli): add function enable/disable and fix upgrade re-exec

2026-05-25 10:25:04 +03:00

signing_key_test.go

feat(gateway): implement self-service tenant push notifications

2026-05-08 11:23:53 +03:00

signing_key.go

feat(gateway): implement self-service tenant push notifications

2026-05-08 11:23:53 +03:00

status_handlers_test.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

status_handlers.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

storage_handlers_test.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

tcp_sni_gateway.go

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

webrtc_route_gate_test.go

feat(gateway): decouple turn credentials and sfu route registration

2026-06-01 10:12:07 +03:00