applications/macsync
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

merge batch 7: TODO marker for /my/* auth model divergence (ssoRequired vs serviceTokenAuth)

Browse source
This commit is contained in:
quinn 2026-05-15 18:22:37 -07:00
parent 8c2943dd5f
commit 8cc2c50fed
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/server/src/app/server.ts
View file

@ -100,6 +100,11 @@ export async function createApp() {
return deviceTokenAuth(config.SERVICE_TOKEN)(c, next);
})
.route('/client', clientSurface)
// TODO(merge-conflict): plum gates /my/* with `ssoRequired(SSO_VALIDATE_URL, SERVICE_TOKEN)`
// (cookie/SSO session against an external validator); apricot gates it with
// `serviceTokenAuth(SERVICE_TOKEN)` (single shared bearer token). These are
// production auth models for the dashboard — pick one before deploy.
// Currently using apricot's simpler service-token mode.
.use('/my/*', corsMiddleware('same-origin'))
.use('/my/*', rateLimitMiddleware('my'))
.use('/my/*', serviceTokenAuth(config.SERVICE_TOKEN))