apunkt/rowboat
1
0
Fork 0
mirror of https://github.com/rowboatlabs/rowboat.git synced 2026-05-01 03:16:29 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions
rowboat/apps
History
fuleinist e0ca073f82 Fix Bus.unsubscribe splice(-1) bug and add auth validation to copilot-stream endpoint 
Fixes two security issues:

1. CLI Bus.unsubscribe (issue #492): Fix splice(-1,1) bug when indexOf returns -1.
   - When unsubscribe is called twice, splice(-1,1) removes the last element instead of doing nothing.
   - Guard with indexOf check before splicing.

2. Copilot stream auth validation (issue #493/#494): Return 401 when Bearer token is missing.
   - Extract and validate apiKey before passing to controller.
   - Prevents undefined apiKey from bypassing auth checks.
2026-04-17 06:06:40 +08:00
..
cli Fix Bus.unsubscribe splice(-1) bug and add auth validation to copilot-stream endpoint 2026-04-17 06:06:40 +08:00
docs feat(oauth): switch Google OAuth from PKCE to authorization code flow with client secret 2026-04-10 00:43:34 +05:30
experimental Fix/prebuilt cards updates (#263) 2025-09-16 15:29:48 +05:30
python-sdk update py-sdk docs 2025-08-19 13:35:10 +05:30
rowboat Fix Bus.unsubscribe splice(-1) bug and add auth validation to copilot-stream endpoint 2026-04-17 06:06:40 +08:00
rowboatx wip-electron 2026-01-16 12:05:33 +05:30
x Fix Bus.unsubscribe splice(-1) bug and add auth validation to copilot-stream endpoint 2026-04-17 06:06:40 +08:00