You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Added
ArcOptions.QueryHealth (QueryHealthOptions with RequireAuthentication and Roles, bound from Cratis:Arc:QueryHealth) controls who may observe query health. (#2873)
Changed
The query health endpoint (QueryHealth.ObserveHealth) now requires an authenticated user outside Development, over HTTP and both observable-query hub transports. It stays anonymous in Development. Set Cratis:Arc:QueryHealth:RequireAuthentication to false to keep it anonymous everywhere, or set Roles to restrict it further. (#2873)
Security
Query health no longer exposes per-connection user IDs and client addresses to anonymous callers outside Development. (#2873)