AetherTable

Heretek-AI/AetherTable

0 Fork 0

mirror of https://github.com/Heretek-AI/AetherTable.git synced 2026-11-09 17:51:24 -10:00

Commit Graph

Author	SHA1	Message	Date
John SmithandClaude	4e8477d08b	feat(gateway): admin bootstrap allowlist, fail-closed secret, lobby membership gate (iteration 12) Signup accepts only player/spectator — staff roles come from the VTT_ADMIN_EMAILS allowlist (rotatable without restart). Gateway aborts startup without AUTH_SECRET/VTT_ENGINE_SECRET, mirroring engine semantics. GET /lobbies/{id} member-or-staff only with no existence oracle; invite codes stay visible to members. 20 tests red-first; pytest 672 passed. Co-Authored-By: Claude <[email protected]>	2026-08-24 21:14:10 -04:00
John SmithandClaude	b7bb40b160	feat(gateway): durability-bridge auth + header-first tokens on legacy routes (iteration 8) persist/hydrate require auth with x-card-style participation gating (gm/admin any session, others via bound lobby roster, unbound fail closed). All remaining token:Query routes migrated to _require_auth (Bearer preferred); EnginePersistRequest.owner_user_id spoofing removed — ownership from verified token. Sweep documented remaining unauthenticated LLM-spend/agent routes for a coordinated follow-up. 11 new tests red-first; pytest 618 passed / 22 skipped. Co-Authored-By: Claude <[email protected]>	2026-08-24 19:26:51 -04:00

Author

SHA1

Message

Date

John SmithandClaude

4e8477d08b

feat(gateway): admin bootstrap allowlist, fail-closed secret, lobby membership gate (iteration 12)

Signup accepts only player/spectator — staff roles come from the
VTT_ADMIN_EMAILS allowlist (rotatable without restart). Gateway aborts
startup without AUTH_SECRET/VTT_ENGINE_SECRET, mirroring engine semantics.
GET /lobbies/{id} member-or-staff only with no existence oracle; invite
codes stay visible to members. 20 tests red-first; pytest 672 passed.

Co-Authored-By: Claude <[email protected]>

2026-08-24 21:14:10 -04:00

John SmithandClaude

b7bb40b160

feat(gateway): durability-bridge auth + header-first tokens on legacy routes (iteration 8)

persist/hydrate require auth with x-card-style participation gating
(gm/admin any session, others via bound lobby roster, unbound fail closed).
All remaining token:Query routes migrated to _require_auth (Bearer preferred);
EnginePersistRequest.owner_user_id spoofing removed — ownership from verified
token. Sweep documented remaining unauthenticated LLM-spend/agent routes for a
coordinated follow-up. 11 new tests red-first; pytest 618 passed / 22 skipped.

Co-Authored-By: Claude <[email protected]>

2026-08-24 19:26:51 -04:00