Hugh Brown 66da278673 security: require org-admin for gateway session message endpoint ...

send_gateway_session_message only required basic auth (AUTH_DEP) while
all other gateway endpoints required ORG_ADMIN_DEP. Any authenticated
user could send messages to any gateway session. Now requires org-admin
and verifies the board belongs to the caller's organization.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 23:35:10 +05:30

..

internal

refactor: centralize session key generation with new helper functions

2026-02-11 01:56:16 +05:30

__init__.py

refactor: update imports to use provisioning_db and gateway_rpc modules

2026-02-11 00:00:19 +05:30

admin_service.py

feat: implement unified agent lifecycle orchestration and metadata tracking

2026-02-25 00:34:04 +05:30

constants.py

feat: implement unified agent lifecycle orchestration and metadata tracking

2026-02-25 00:34:04 +05:30

coordination_service.py

feat(config): make BASE_URL a required field and update related documentation

2026-03-05 01:36:07 +05:30

db_agent_state.py

refactor: streamline agent lifecycle management with new DB service helpers

2026-02-11 01:13:10 +05:30

db_service.py

feat: enhance logging configuration and add request logging context

2026-02-11 16:49:43 +05:30

device_identity.py

refactor: improve code formatting and readability in tests and components

2026-02-22 19:45:18 +05:30

error_messages.py

feat: add disable_device_pairing option to gateway configuration

2026-02-22 19:19:26 +05:30

exceptions.py

refactor: reorganize OpenClaw services and enhance session management

2026-02-10 14:50:27 +05:30

gateway_compat.py

feat: add config fallback for gateway version compatibility check

2026-02-23 01:23:09 +05:30

gateway_dispatch.py

refactor: clean up imports and improve session key assertion formatting

2026-02-11 10:47:32 +05:30

gateway_resolver.py

Merge branch 'master' into copilot/feature-allow-self-signed-tls

2026-02-22 19:51:27 +05:30

gateway_rpc.py

refactor(gateway): update gateway parameters to use None as default #169

2026-03-03 01:51:52 +05:30

lifecycle_orchestrator.py

feat: implement unified agent lifecycle orchestration and metadata tracking

2026-02-25 00:34:04 +05:30

lifecycle_queue.py

feat: implement unified agent lifecycle orchestration and metadata tracking

2026-02-25 00:34:04 +05:30

lifecycle_reconcile.py

feat: implement unified agent lifecycle orchestration and metadata tracking

2026-02-25 00:34:04 +05:30

onboarding_service.py

feat: enhance logging configuration and add request logging context

2026-02-11 16:49:43 +05:30

policies.py

fix: update HTTP status code from UNPROCESSABLE_ENTITY to UNPROCESSABLE_CONTENT

2026-02-15 16:06:06 +05:30

provisioning_db.py

redesigned dashboard page

2026-03-04 16:01:56 +05:30

provisioning.py

feat(config): make BASE_URL a required field and update related documentation

2026-03-05 01:36:07 +05:30

session_service.py

security: require org-admin for gateway session message endpoint

2026-03-07 23:35:10 +05:30

shared.py

refactor: streamline agent lifecycle management with new DB service helpers

2026-02-11 01:13:10 +05:30