orama

mirror of https://github.com/DeBrosOfficial/orama.git synced 2026-06-16 22:54:12 +00:00

History

anonpenguin23 7b5587094d fix(gateway): api_key owners no longer 403 on namespaces they own

The namespace-ownership middleware compared an api_key caller's RAW key
against namespace_ownership.owner_id, but api_keys are stored HMAC-hashed
(HashAPIKey). So every api_key-authenticated owner got a 403 on a namespace
they actually own — blocking function deploy and PUT /v1/push/config.

Hash the presented api_key before the ownership comparison (hashed first,
raw second as a rolling-upgrade legacy fallback), mirroring the existing
lookupAPIKeyNamespace pattern. The wallet path is unchanged (wallets stored
raw). Security-reviewed: grants only to the correct key holder, no
escalation.

2026-06-15 11:20:23 +03:00

.githooks

Fixed pre push on core

2026-03-26 18:24:47 +02:00

cmd

chore(version): bump to 0.122.47

2026-06-11 11:45:12 +03:00

debian

refactor: move Go project into core/ for monorepo structure

2026-03-26 18:14:52 +02:00

docs

feat(gateway): implement stealth TURN discovery and configuration