AdolaniumandNeil d2e4402623 fix(relay): authorize reserve routes before reading request bodies (#36346) ...

* fix(relay): bound internal reserve request bodies

* fix(relay): authorize before reading reserve bodies

Hono reads a chunked body inside the body limit before next(). A caller who fails the director check can no longer stall the refusal, and an oversized body from that caller is not reported as 413.

* test(relay): cover an unavailable demote body

The missing-route check only posted to /internal/reserve. Demote now gets the same oversized request and must stay 404.

---------

Co-authored-by: Neil <neil@stably.ai>

2026-11-06 16:24:06 -08:00

..

assignment

fix(relay): authorize reserve routes before reading request bodies (#36346)

2026-11-06 16:24:06 -08:00

authentication

test: remove 92 low-value relay tests (#38685)

2026-11-05 14:23:15 -08:00

cell

fix(relay): authorize reserve routes before reading request bodies (#36346)

2026-11-06 16:24:06 -08:00

connections

test: remove 92 low-value relay tests (#38685)

2026-11-05 14:23:15 -08:00

control-leases

test: remove 125 low-value relay and build-script tests (#38692)

2026-11-05 14:38:47 -08:00

credentials

test: remove low-value relay SQL and lifecycle test inventories (#38580)

2026-11-05 07:30:50 -08:00

database

test: remove 125 low-value relay and build-script tests (#38692)

2026-11-05 14:38:47 -08:00

observability

test: remove 125 low-value relay and build-script tests (#38692)

2026-11-05 14:38:47 -08:00

process-lifecycle

test: remove 125 low-value relay and build-script tests (#38692)

2026-11-05 14:38:47 -08:00

test-fixtures

refactor(relay): group route, forwarding and connection owners (#38374)

2026-11-04 21:59:50 -08:00

admin-route-transient-app.test.ts

test: remove 79 low-value cloud, hook and search tests (#38642)

2026-11-05 11:58:24 -08:00

app.ts

refactor(relay): group route, forwarding and connection owners (#38374)

2026-11-04 21:59:50 -08:00

cell-status-reserve-view.test.ts

refactor(relay): group route, forwarding and connection owners (#38374)

2026-11-04 21:59:50 -08:00

config.test.ts

test: remove 92 low-value relay tests (#38685)

2026-11-05 14:23:15 -08:00

config.ts

refactor(relay): group route, forwarding and connection owners (#38374)

2026-11-04 21:59:50 -08:00

fault-injection-test-entry.ts

refactor(relay): group route, forwarding and connection owners (#38374)

2026-11-04 21:59:50 -08:00

floating-promise-census.test.ts

[comment audit] Complete repository-wide comment cleanup (#33249)

2026-10-25 04:05:46 -07:00

host-whereabouts-app.test.ts

refactor(relay): group route, forwarding and connection owners (#38374)

2026-11-04 21:59:50 -08:00

index.ts

refactor(relay): group route, forwarding and connection owners (#38374)

2026-11-04 21:59:50 -08:00

regional-host-drain-app.test.ts

test: remove 125 low-value relay and build-script tests (#38692)

2026-11-05 14:38:47 -08:00

relay-region-app.test.ts

test: remove 125 low-value relay and build-script tests (#38692)

2026-11-05 14:38:47 -08:00

relay-region-selection-app.test.ts

test: remove 125 low-value relay and build-script tests (#38692)

2026-11-05 14:38:47 -08:00

relay-server.ts

refactor(relay): group route, forwarding and connection owners (#38374)

2026-11-04 21:59:50 -08:00

relay-sigterm-exit.blackbox.test.ts

test(relay): send the repeated SIGTERM only after shutdown has started (#37636)

2026-11-02 19:51:40 -08:00

relay.blackbox.test.ts

refactor(relay): group route, forwarding and connection owners (#38374)

2026-11-04 21:59:50 -08:00