RomanNum3ral
/
paperclip
mirror of https://github.com/paperclipai/paperclip.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix(security): classify chat board-key routes 

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
cryppadotta 2026-09-10 17:20:29 +00:00
parent 58a0f20070
commit a562e90397
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
server/src/security/board-key-route-inventory.ts
View File

@ -205,6 +205,9 @@ export const BOARD_KEY_ROUTE_INVENTORY: readonly string[] = [
"board_key_denied | deny | /api/board/{*path}",
"board_key_denied | deny | /api/bootstrap/{*path}",
"board_key_denied | deny | /api/cases/{*path}",
"board_key_denied | deny | /api/chat-endpoints/{*path}",
"board_key_denied | deny | /api/chat-identity-links/{*path}",
"board_key_denied | deny | /api/chat-webhooks/{*path}",
"board_key_denied | deny | /api/cli-auth/{*path}",
"board_key_denied | deny | /api/cloud/{*path}",
"board_key_denied | deny | /api/companies/{id}/adapters/{id}/auth-signal",

3
server/src/security/board-key-route-registry.ts
View File

@ -368,6 +368,9 @@ export function lookupBoardKeyRoute(methodInput: string, rawPath: string): Board
if ([
"auth",
"cli-auth",
"chat-endpoints",
"chat-identity-links",
"chat-webhooks",
"health",
"openapi.json",
"invites",