Joseph Doherty 65bca804bb feat(security): opt-in authentication for /metrics (SEC-14) ...

New MxGateway:Metrics:RequireAuthentication (default false). When true,
/metrics requires an API key with the admin scope (verified through the
cached verifier and the shared API-key failure limiter) or a dashboard
login with a real dashboard role; anonymous localhost and
Authentication:Mode=Disabled do not qualify. An anonymous scrape gets a
plain 401 Bearer challenge, a throttled peer 429. /health stays anonymous
because the off-repo Overview dashboard polls /health/active.

MapZbMetrics returns IEndpointConventionBuilder, so the policy is attached
with RequireAuthorization.

2026-10-22 06:37:31 -04:00

.gitea/workflows

ci(TST-35): run gateway suite on windev nightly

2026-08-25 11:56:35 -04:00

archreview

docs: record cycle-3 client release

2026-08-25 12:47:54 -04:00

clients

fix: address final ackmsg-as-operator review findings

2026-10-19 19:58:24 -04:00

code-reviews

docs(reviews): re-verify doc-only Server-0xx resolutions; re-fix regressions

2026-08-18 06:48:45 -04:00

docs

feat(security): opt-in authentication for /metrics (SEC-14)

2026-10-22 06:37:31 -04:00

lib

A.2: replace AlarmClientConsumer with wnwrap-based polling consumer

2026-05-01 09:44:15 -04:00

scripts

ci(TST-35): run gateway suite on windev nightly

2026-08-25 11:56:35 -04:00

src

feat(security): opt-in authentication for /metrics (SEC-14)

2026-10-22 06:37:31 -04:00

.gitignore

chore: ignore project-local worktrees

2026-08-20 12:14:23 -04:00

A2-galaxyrepository-adoption-handoff.md

fix(SEC-33,SEC-34): address code review — missed docs, key-id guard comment, test consolidation

2026-08-07 06:49:24 -04:00

CLAUDE.md

docs: alarm acknowledgement writes AckMsg as the authenticated operator

2026-10-19 19:44:21 -04:00

gateway.md

fix(grpc): typed alarm-feed overflow, memoized alarm snapshot, cancellable stream writes, uniform reply correlation id

2026-10-22 06:27:36 -04:00

glauth.md

fix(TST-31): reconcile glauth.md with the shared GLAuth directory, fix propagated live-test credential

2026-08-20 09:19:59 -04:00

nuget.config

build(secrets): add ZB.MOM.WW.Secrets 0.1.2 package refs + nuget source mapping

2026-07-16 10:19:06 -04:00

REVIEW-PROCESS.md

chore(GWC-36,IPC-38,TST-33,TST-34,TST-36): close cycle-3 currency gaps

2026-08-25 10:52:39 -04:00

stillpending.md

chore(GWC-36,IPC-38,TST-33,TST-34,TST-36): close cycle-3 currency gaps

2026-08-25 10:52:39 -04:00

StyleGuide.md

Add gateway implementation planning docs

2026-04-26 15:19:17 -04:00

S

Description

No description provided

53 MiB

Languages

C# 48.4%

Java 40.1%

Python 3.2%

Rust 3%

Go 2.6%

Other 2.7%