Skip to content

Promote foss-sandbox to foss-main: corporate-id middleware + PR template - #45

Merged
UsamaSadiq merged 4 commits into
foss-mainfrom
foss-sandbox
Jul 20, 2026
Merged

Promote foss-sandbox to foss-main: corporate-id middleware + PR template#45
UsamaSadiq merged 4 commits into
foss-mainfrom
foss-sandbox

Conversation

@UsamaSadiq

Copy link
Copy Markdown
Collaborator

Description

Promotes foss-sandbox changes to production. Key changes:

  • Corporate-ID check in ProxyAuth middleware (Layer 2): decodes X-Auth-Request-Access-Token header and validates custom:corporate_id against SMB_CORPORATE_ID env var. Returns 403 on mismatch. Closes the Bearer token bypass that skips mpass-auth-proxy.
  • Standardized PR template: updated to use Description and Testing sections only.

Testing

  • Verified on staging with matching and mismatching corporate IDs via Bearer token
  • Confirmed enforcement is skipped when SMB_CORPORATE_ID is empty (backward compatible)

UsamaSadiq and others added 4 commits June 4, 2026 19:02
@UsamaSadiq
UsamaSadiq merged commit 80da431 into foss-main Jul 20, 2026
8 of 9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant