From a562e90397ae494068be054707e649a0edd27bc2 Mon Sep 17 00:00:00 2001 From: cryppadotta <34892728+cryppadotta@users.noreply.github.com> Date: Thu, 10 Sep 2026 17:20:29 +0000 Subject: [PATCH] fix(security): classify chat board-key routes Co-Authored-By: Paperclip --- server/src/security/board-key-route-inventory.ts | 3 +++ server/src/security/board-key-route-registry.ts | 3 +++ 2 files changed, 6 insertions(+) diff --git a/server/src/security/board-key-route-inventory.ts b/server/src/security/board-key-route-inventory.ts index 454a359413..e2f0612ebe 100644 --- a/server/src/security/board-key-route-inventory.ts +++ b/server/src/security/board-key-route-inventory.ts @@ -205,6 +205,9 @@ export const BOARD_KEY_ROUTE_INVENTORY: readonly string[] = [ "board_key_denied | deny | /api/board/{*path}", "board_key_denied | deny | /api/bootstrap/{*path}", "board_key_denied | deny | /api/cases/{*path}", + "board_key_denied | deny | /api/chat-endpoints/{*path}", + "board_key_denied | deny | /api/chat-identity-links/{*path}", + "board_key_denied | deny | /api/chat-webhooks/{*path}", "board_key_denied | deny | /api/cli-auth/{*path}", "board_key_denied | deny | /api/cloud/{*path}", "board_key_denied | deny | /api/companies/{id}/adapters/{id}/auth-signal", diff --git a/server/src/security/board-key-route-registry.ts b/server/src/security/board-key-route-registry.ts index 1a7cd52937..4e08541d5d 100644 --- a/server/src/security/board-key-route-registry.ts +++ b/server/src/security/board-key-route-registry.ts @@ -368,6 +368,9 @@ export function lookupBoardKeyRoute(methodInput: string, rawPath: string): Board if ([ "auth", "cli-auth", + "chat-endpoints", + "chat-identity-links", + "chat-webhooks", "health", "openapi.json", "invites",