Skip to content

restrict to station domain only#47

Merged
fleandrei merged 3 commits into
mainfrom
sec_fix_restrict
Oct 30, 2025
Merged

restrict to station domain only#47
fleandrei merged 3 commits into
mainfrom
sec_fix_restrict

Conversation

@fleandrei

Copy link
Copy Markdown
Collaborator

No description provided.

@fleandrei fleandrei requested a review from Copilot October 29, 2025 15:28

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the node manager plugin to version 0.4.3 and adds origin restriction middleware for enhanced security. The key changes include updating the station dependency from v0.6.9 to v0.8.2 to access new HTTP utilities, and implementing middleware that validates request origins against an allowlist.

  • Version bump from 0.4.2 to 0.4.3
  • Upgraded github.com/massalabs/station dependency from v0.6.9 to v0.8.2
  • Added origin restriction middleware to validate incoming requests

Reviewed Changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
manifest.json Bumped plugin version to 0.4.3
go.mod Updated station dependency to v0.8.2 and added commented replace directive
go.sum Updated checksums for station v0.8.2 dependency
api/middleware.go New middleware implementation for origin validation using allowlist
api/restapi/configure_node_manager_plugin.go Integrated origin restriction middleware into global middleware chain

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread go.mod Outdated
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@fleandrei fleandrei requested a review from peterjah October 30, 2025 09:03
@fleandrei fleandrei merged commit cc63721 into main Oct 30, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants