viettranx d9087fd0b7 fix(security): harden MCP bridge tenant_id propagation ...

- Guard uuid.Nil before converting to string in loop.go to avoid
  sending zero UUID as X-Tenant-ID header when no tenant is set
- Return (ok, tenantVerified) from VerifyBridgeContext so callers
  only inject tenant_id when HMAC actually covers it (level 1)
- Add unit tests for SignBridgeContext and VerifyBridgeContext
  including security test for tenant injection via HMAC fallback

2026-03-27 23:23:14 +07:00

..

methods

feat(desktop): team settings modal, task detail attachments, shared icons

2026-03-27 12:18:01 +07:00

client.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

event_filter.go

refactor(security): remove cross-tenant bypass, enforce strict tenant isolation

2026-03-24 20:40:59 +07:00

log_tee.go

chore: upgrade Go 1.25 → 1.26 and apply go fix modernizations

2026-03-10 00:09:15 +07:00

ratelimit.go

Initial commit: GoClaw AI agent gateway

2026-02-22 14:58:07 +07:00

router.go

fix(gateway): resolve tenant switch mismatch for non-owner users

2026-03-27 12:07:14 +07:00

server.go

fix(security): harden MCP bridge tenant_id propagation

2026-03-27 23:23:14 +07:00

update_check.go

feat(gateway): add version update checker (#374)

2026-03-23 17:37:19 +07:00