mirror of
https://github.com/DeBrosOfficial/orama.git
synced 2026-08-06 17:49:27 +00:00
a66cd1ab3c
- fix(gateway): server-side storage unpin for serverless jobs (bugboard #151). The layer-1 storage gate now accepts the runtime key's exchanged (storage- scoped) JWT on DELETE /v1/storage/unpin — wallet JWT OR api-key-exchanged — so a userless cron/avatar-GC/free-up-space can reclaim its own namespace's pins. A bare API key still fails; unpin stays namespace-ownership-checked and reclaim-only. Upload/get/pin keep the strict wallet-JWT requirement. - fix(storage): unpin is now idempotent (bugboard #140) — a CID already absent from the cluster pinset returns 200 {already_unpinned:true} instead of a 500 wrapping the cluster 404 (matched to the definitive "not part of the pinset" phrase; unrelated 404/"not found" still error). - fix(serverless): stop trusting the client X-Wallet header for invoke identity (bugboard #152) — it let an unauthenticated caller on the public invoke paths impersonate any wallet and defeat in-function admin gates. Identity now comes only from a verified JWT subject or the API-key-derived namespace. - feat(serverless): gateway-enforced `internal` function flag (bugboard #152) — migration 035 is_internal; function.yaml `internal:`; an internal function is invokable only by a system trigger or an admin caller (HTTP, stateless-WS, persistent-WS upgrade, and WASM->WASM paths all gated). Default false, so no existing function changes behavior.
2 lines
9 B
Plaintext
2 lines
9 B
Plaintext
0.122.79
|