Matthew Meszaros 396bab0e06 Merge branch 'main' into feat/issue-414-delete-api-key

2026-09-10 05:36:06 -07:00

..

handler

Merge branch 'main' into feat/issue-414-delete-api-key

2026-09-10 05:36:06 -07:00

middleware

feat: address the review on the split-deployment branch by moving the two broker routes onto their own NODE_BROKER_TOKEN so the internet-facing tracking and forms services no longer hold a credential that can open any organization's data key, refusing to presign any key outside the prefixes a node reaches, fixing IAM policies that named an alias ARN KMS never resolves in a Resource element, bounding both brokered HTTP clients because the sync loop's context never expires, no longer reporting a 403 from the object store as a missing body, and redacting the DSN and URL credentials the dry-run listing printed in clear

2026-09-10 14:19:53 +02:00

cors.go

feat: move infrastructure state off dynamodb

2026-06-02 15:54:12 +02:00

routes.go

Merge branch 'main' into feat/issue-414-delete-api-key

2026-09-10 05:36:06 -07:00