Skip to content

fix(server): validate permission and question ids#26456

Merged
kitlangton merged 1 commit into
devfrom
kit/httpapi-request-id-validation
May 9, 2026
Merged

fix(server): validate permission and question ids#26456
kitlangton merged 1 commit into
devfrom
kit/httpapi-request-id-validation

Conversation

@kitlangton
Copy link
Copy Markdown
Contributor

Summary

  • Enforce runtime prefixes for permission and question IDs in Effect schemas.
  • Add regression coverage for malformed request IDs returning 400.

Test

  • bun test --timeout 5000 test/server/httpapi-authorization.test.ts test/server/httpapi-instance.test.ts test/server/httpapi-sync.test.ts
  • bun typecheck

@kitlangton kitlangton force-pushed the kit/httpapi-auth-challenge-header branch from 0bde4fc to fc45533 Compare May 9, 2026 04:12
@kitlangton kitlangton force-pushed the kit/httpapi-request-id-validation branch from d35105c to 9a2ad7b Compare May 9, 2026 04:12
Base automatically changed from kit/httpapi-auth-challenge-header to dev May 9, 2026 04:15
@kitlangton kitlangton force-pushed the kit/httpapi-request-id-validation branch from 9a2ad7b to 528dcf1 Compare May 9, 2026 04:17
@kitlangton kitlangton marked this pull request as ready for review May 9, 2026 04:20
@kitlangton kitlangton merged commit dc978cb into dev May 9, 2026
6 of 8 checks passed
@kitlangton kitlangton deleted the kit/httpapi-request-id-validation branch May 9, 2026 04:20
katosun2 pushed a commit to katosun2/opencode that referenced this pull request May 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant