Resolve all high-severity architecture review findings

This commit is contained in:
Joseph Doherty
2026-09-09 16:13:58 -04:00
parent 8bfe65512e
commit 146a13238f
192 changed files with 3160 additions and 753 deletions
@@ -99,6 +99,7 @@ public sealed class CentralControlAuthInterceptor : Interceptor
UnaryServerMethod<TRequest, TResponse> continuation)
{
await AuthorizeAsync(context).ConfigureAwait(false);
if (IsGated(context.Method)) CentralControlSiteIdentity.ValidateRequest(request, context);
return await continuation(request, context).ConfigureAwait(false);
}
@@ -187,6 +188,8 @@ public sealed class CentralControlAuthInterceptor : Interceptor
presented is null ? "no bearer token presented" : "bearer token did not match");
throw Denied("control plane authentication failed");
}
CentralControlSiteIdentity.SetVerified(context, siteId);
}
private static RpcException Denied(string reason)
@@ -290,6 +290,8 @@ try
// removed ClusterClient path used to carry, and Asks CentralCommunicationActor — zero handler logic here.
builder.Services.AddGrpc(options =>
{
options.MaxReceiveMessageSize = ZB.MOM.WW.ScadaBridge.Communication.Grpc.GrpcMessageLimits.MaxMessageBytes;
options.MaxSendMessageSize = ZB.MOM.WW.ScadaBridge.Communication.Grpc.GrpcMessageLimits.MaxMessageBytes;
options.Interceptors.Add<CentralControlAuthInterceptor>();
});
builder.Services.AddSingleton<
@@ -824,6 +826,8 @@ try
// why every environment must carry one before running this build.
builder.Services.AddGrpc(options =>
{
options.MaxReceiveMessageSize = ZB.MOM.WW.ScadaBridge.Communication.Grpc.GrpcMessageLimits.MaxMessageBytes;
options.MaxSendMessageSize = ZB.MOM.WW.ScadaBridge.Communication.Grpc.GrpcMessageLimits.MaxMessageBytes;
options.Interceptors.Add<LocalDbSyncAuthInterceptor>();
options.Interceptors.Add<ControlPlaneAuthInterceptor>();
});