Skip to content

backend 0.9.1 — /health RBAC+audit gated

Choose a tag to compare

View all tags
@kwoo24-oss kwoo24-oss released this 23 Jun 03:53
· 531 commits to main since this release
Immutable release. Only release title and notes can be modified.
backend-v0.9.1
acfb0f9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security hardening. GET /health is unauthenticated (uptime monitors + e2e callers poll it), and it exposed operational security internals to anyone who could reach the host: the RBAC hook-failure counters (rbac — reveals silent role-sync drift) and the audit-log stats (audit).

/health now takes optional auth and includes rbac + audit only for authenticated callers. The operational stats (vector_store reachability + indexing/backfill counts, BM25, external_git/metadata_backfill/events backlogs) stay anonymous — they are monitoring data the codebase already treats as world-readable (8+ e2e suites + uptime probes poll them without auth) and carry no per-vault names/IDs. /health/vault/{name} stays the per-vault, reader-gated surface.

Scoped to the two sensitive internals (not the whole body), so the established unauthenticated /health monitoring contract keeps working unchanged — no test churn. New e2e pins both postures (anon: stats present, rbac+audit withheld; authed: included). CI 4/4 green.

Assets 3
Loading