admin/0pt
5
0
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(engine): fail-closed X-Internal-Token-gate + commit-kedja i services/api (ENGINE_URL-wire-förberedelse) #58

Merged
admin merged 1 commits from feat/engine-internal-token into main 2026-09-15 01:45:39 +00:00
Conversation 0 Commits 1 Files Changed 3
+128 -1
1 Commits
Author SHA1 Message Date
admin ff11216813 feat(engine): fail-closed X-Internal-Token-gate + commit-kedja (GIT_SHA) i services/api
masterplan-lock / check (push) Successful in 3s
Details
masterplan-lock / check (pull_request) Successful in 10s
Details
Security Scan (SIAX Cloud) / security (push) Successful in 14s
Details
CI (SIAX Cloud) / security (push) Successful in 17s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 17s
Details
CI (SIAX Cloud) / integration (push) Successful in 25s
Details
CI (SIAX Cloud) / quality (push) Successful in 35s
Details
Security Scan (SIAX Cloud) / security (pull_request) Successful in 40s
Details
CI (SIAX Cloud) / integration (pull_request) Successful in 49s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 56s
Details 
- X-Internal-Token skickades av edgen men verifierades ALDRIG — gate som
  raw-ASGI-middleware: INTERNAL_TOKEN satt => alla routes utom /health kräver
  exakt token, 401 (constant-time) annars. Ospecificerad token = inert (dev).
- Dockerfile: ARG GIT_SHA + OCI-label + /health.reporting revision
- compose var redan skriven för INTERNAL_TOKEN — motorn hade bara aldrig
  deployats med den
- tester: tests/test_internal_token_gate.py (3: off/public/401-pass) — hela
  services/api-sviten 62 passed, 2 skipped (dokumenterade known-gaps), 0 fail
 2026-09-15 03:38:43 +02:00