Hein fbfc1aadb5 feat(security): send request info as login claims ...

Add RequestInfoMiddleware / WithRequestInfo, which put client details in the
context. Login, LoginWithAPIKey, LoginWithPasskey and JWT login merge them into
the claims: ip_address, client_port, is_private_ip, previous_session, device_id,
client_id, user_agent, server_ip_address, server_port, host, origin, referer.
RequestInfoOptions adds trusted-proxy handling for X-Forwarded-For/X-Real-IP.

2026-10-12 12:18:23 +02:00

..

aiproxy

fix(aiproxy): handle response body closure and inspect return types

2026-10-07 23:41:28 +02:00

cache

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

common

fix(filters): qualify model columns to avoid ambiguity with joins

2026-10-07 20:58:44 +02:00

config

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

dbmanager

fix(security): reorder import statements for consistency

2026-10-01 09:33:57 +02:00

dbtrace

fix(resolvemcp): single transaction for create/update, hook registry mutex, uniform not-found, bounded SSE host cache

2026-10-01 13:33:11 +02:00

errortracking

fix(errortracking): update error context handling in Sentry

2026-05-21 14:03:01 +02:00

eventbroker

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

funcspec

fix(filters): qualify model columns to avoid ambiguity with joins

2026-10-07 20:58:44 +02:00

logger

fix(logger): address audit findings

2026-09-30 13:19:52 +02:00

metrics

feat(aiproxy): add authenticated proxy for OpenAI-compatible APIs and MCP servers

2026-10-07 23:39:40 +02:00

middleware

feat(middleware): export clientqueue_enqueued_total counter

2026-09-30 16:16:25 +02:00

modelregistry

feat(resolvemcp): add model descriptions, usage guide and catalogue export

2026-10-07 14:09:37 +02:00

mqttspec

fix(crud): skip generated and read-only columns on insert and update

2026-10-02 22:43:45 +02:00

openapi

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

reflection

fix(bun): ignore scanonly columns in ExcludeColumn

2026-10-05 14:10:52 +02:00

resolvemcp

feat(resolvemcp)!: make the server read-only by default

2026-10-07 14:17:56 +02:00

resolvespec

fix(filters): qualify model columns to avoid ambiguity with joins

2026-10-07 20:58:44 +02:00

restheadspec

test(restheadspec): skip xfiles response test, fixture is not in the repo

2026-10-08 00:01:16 +02:00

security

feat(security): send request info as login claims

2026-10-12 12:18:23 +02:00

server

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

spectypes

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

testmodels

fix(delete): run delete hooks and queries in one transaction

2026-09-30 22:33:25 +02:00

tracing

fix(tracing): address audit findings

2026-09-30 13:39:50 +02:00

websocketspec

fix(crud): skip generated and read-only columns on insert and update

2026-10-02 22:43:45 +02:00