Juan Denis c7b6f145d1 Serve the panel through the Cloud relay tunnel ...

Until now the connect client refused every http and sio stream, so
Open panel in ServerKit Cloud showed a blank page. The client now
bridges them to the loopback listener, the panel serves its page
under the relay's /t/<device>/ prefix, and the SPA prefixes its
router, API and Socket.IO paths from it. The Cloud grant is checked
against Cloud's JWKS before signing in the panel user with the same
email; panel two-factor still applies.

2026-09-29 23:19:34 -04:00

..

__init__.py

Add backup, monitoring, and deployment APIs

2026-01-17 12:08:02 -05:00

api_analytics.py

feat(security): trust reverse-proxy client IP via one gated seam

2026-07-18 00:51:21 -04:00

api_key_auth.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

api_scope_middleware.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00

audit.py

refactor(security): one sensitive-keyword union for all four redaction sinks (plan 77 F3)

2026-08-19 02:10:22 -04:00

demo.py

Serve the panel through the Cloud relay tunnel

2026-09-29 23:19:34 -04:00

rate_limit.py

feat(security): trust reverse-proxy client IP via one gated seam

2026-07-18 00:51:21 -04:00

rbac.py

fix(authz): give every mutating route an explicit authorization decision

2026-08-19 21:44:17 -04:00

request_id.py

feat(api): centralize typed errors and request correlation

2026-08-18 02:42:25 -04:00

request_profiling.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

security.py

fix(github): repair app manifest setup flow (#131)

2026-09-04 22:20:16 -04:00

session_auth.py

fix(auth): enforce MFA, scoped keys, and revocable sessions

2026-09-05 04:29:16 -04:00