daarion-admin/microdao-daarion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(sofiia-console): protect audit endpoint with admin token

Browse Source 
Made-with: Cursor
This commit is contained in:
Apple
2026-03-02 09:42:10 -08:00
parent 11e0ba7264
commit e2c2333b6f
4 changed files with 143 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
services/sofiia-console/app/main.py
View File

@@ -35,7 +35,7 @@ except Exception: # pragma: no cover - optional dependency in console env
cv2 = None
from .auth import (
require_api_key, require_api_key_strict, require_auth, require_auth_strict,
require_api_key, require_api_key_strict, require_auth, require_auth_strict, require_audit_auth,
get_console_api_key, _key_valid, _cookie_token, _expected_cookie_token,
_COOKIE_NAME, _COOKIE_MAX_AGE, _IS_PROD,
)
@@ -3728,7 +3728,7 @@ async def api_audit_list(
node_id: Optional[str] = Query(None),
limit: int = Query(50, ge=1, le=200),
cursor: Optional[str] = Query(None),
_auth: str = Depends(require_auth),
_auth: str = Depends(require_audit_auth),
):
SOFIIA_CURSOR_REQUESTS_TOTAL.labels(resource="audit").inc()
cur = _cursor_decode(cursor)