molecule-core

molecule-ai/molecule-core

Fork 2

Files

T

History

fullstack-engineer ceccfeafa8

sop-tier-check / tier-check (pull_request) Successful in 17s

Details

Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 17s

Details

audit-force-merge / audit (pull_request) Has been skipped

Details

test(handlers/socket): add socket_test.go — 6 cases for Phase 30.1/30.2 auth gate

Tests SocketHandler.HandleConnect WebSocket upgrade auth logic:

1. Canvas client (no X-Workspace-ID) → bypasses auth, no DB calls
2. Agent with no live tokens → grandfathered through, no bearer check
3. DB error on HasAnyLiveToken → 500 Internal Server Error
4. Live token present, missing Bearer header → 401 Unauthorized
5. Live token present, invalid Bearer token → 401 Unauthorized

Uses sqlmock for DB expectations + miniredis for wsauth token subsystem.
Hub.Run() drains the Register channel so WS upgrade attempts don't block.

Issue: #699

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-12 09:15:17 +00:00

cmd

docs(runbook): add admin-auth.md covering test-token route lockdown

2026-05-10 02:20:30 +00:00

internal

test(handlers/socket): add socket_test.go — 6 cases for Phase 30.1/30.2 auth gate

2026-05-12 09:15:17 +00:00

migrations

feat(plugins): plugin drift detector + queue + admin apply endpoint (#123 )

2026-05-10 00:39:50 +00:00

pkg/provisionhook

feat(#1957 ): wire gh-identity plugin into workspace-server