calvin.erfmann/pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-08-14 00:09:55 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'aig' of github.com:fosrl/pangolin into aig

Browse Source
This commit is contained in:
Owen
2026-08-12 11:45:28 -04:00
parent bed5817da3 115c3cbf07
commit d3a1f9798d
9 changed files with 68 additions and 60 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/routers/badger/verifySession.ts
+13 -21
View File
@@ -263,28 +263,20 @@ export async function verifyResourceSession(
);
if (action == "ACCEPT") {
// Public inference still requires a virtual API key; do not
// bypass that with an allow rule.
if (mode === "inference") {
logger.debug(
"Rule ACCEPT ignored for inference; continuing to virtual API key check"
);
} else {
logger.debug("Resource allowed by rule");
logger.debug("Resource allowed by rule");
logRequestAudit(
{
action: true,
reason: 100, // allowed by rule
resourceId: resource.resourceId,
orgId: resource.orgId,
location: ipCC
},
parsedBody.data
);
logRequestAudit(
{
action: true,
reason: 100, // allowed by rule
resourceId: resource.resourceId,
orgId: resource.orgId,
location: ipCC
},
parsedBody.data
);
return allowed(res, undefined, dontStripSession);
}
return allowed(res, undefined, dontStripSession);
} else if (action == "DROP") {
logger.debug("Resource denied by rule");
@@ -425,7 +417,7 @@ export async function verifyResourceSession(
parsedBody.data
);
return notAllowed(res, redirectPath);
return notAllowed(res, redirectPath, resource.orgId);
}
// check for access token in headers