stack/apps/api/src at 210b3d2e8f9749afe2aa97941dbb30856975f9f1 - stack - Mosaic Gitea

mosaic/stack

Files

History

Jason Woltje 210b3d2e8f fix(#198 ): Strengthen WebSocket authentication

Implemented comprehensive authentication for WebSocket connections to prevent
unauthorized access:

Security Improvements:
- Token validation: All connections require valid authentication tokens
- Session verification: Tokens verified against BetterAuth session store
- Workspace authorization: Users can only join workspaces they have access to
- Connection timeout: 5-second timeout prevents resource exhaustion
- Multiple token sources: Supports auth.token, query.token, and Authorization header

Implementation:
- Enhanced WebSocketGateway.handleConnection() with authentication flow
- Added extractTokenFromHandshake() for flexible token extraction
- Integrated AuthService for session validation
- Added PrismaService for workspace membership verification
- Proper error handling and client disconnection on auth failures

Testing:
- TDD approach: wrote tests first (RED phase)
- 33 tests passing with 85.95% coverage (exceeds 85% requirement)
- Comprehensive test coverage for all authentication scenarios

Files Changed:
- apps/api/src/websocket/websocket.gateway.ts (authentication logic)
- apps/api/src/websocket/websocket.gateway.spec.ts (comprehensive tests)
- apps/api/src/websocket/websocket.module.ts (dependency injection)
- docs/scratchpads/198-strengthen-websocket-auth.md (documentation)

Fixes #198

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

2026-02-02 13:04:34 -06:00

..

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

chore: Clear technical debt across API and web packages

2026-01-30 18:26:41 -06:00

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

fix(#27 ): address security issues in intent classification

2026-01-31 16:50:32 -06:00

fix(#188 ): sanitize Discord error logs to prevent secret exposure

2026-02-02 12:24:29 -06:00

feat(#165 ): Implement BullMQ module setup

2026-02-01 21:01:25 -06:00

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

completion-verification

feat(#136 ): build Completion Verification Engine

2026-01-31 13:44:23 -06:00

continuation-prompts

feat(#137 ): create Forced Continuation Prompt System

2026-01-31 13:51:46 -06:00

coordinator-integration

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

fix: resolve test failures from CI run 21

2026-01-31 10:37:14 -06:00

chore: Clear technical debt across API and web packages

2026-01-30 18:26:41 -06:00

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

fix(#1 ): Address code review findings

2026-01-28 15:07:04 -06:00

fix(#189 ): add composite database index for job_events table

2026-02-02 12:30:19 -06:00

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

fix(#189 ): add composite database index for job_events table

2026-02-02 12:30:19 -06:00

fix(#182 ): fix Prisma enum import in job-steps tests

2026-02-02 11:41:11 -06:00

test(CI): fix all test failures from lint changes

2026-01-31 01:01:21 -06:00

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

chore: Clear technical debt across API and web packages

2026-01-30 18:26:41 -06:00

fix: address code review issues and cleanup QA reports

2026-01-31 15:01:18 -06:00

feat(#132 ): port MCP (Model Context Protocol) infrastructure

2026-01-31 13:07:58 -06:00

chore: Clear technical debt across API and web packages

2026-01-30 18:26:41 -06:00

feat(#130 ): add Personality Prisma schema and backend

2026-01-31 12:44:50 -06:00

fix: Resolve CI typecheck failures and improve type safety

2026-01-30 20:39:03 -06:00

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

quality-gate-config

feat(#135 ): implement Quality Gate Configuration System

2026-01-31 13:33:04 -06:00

quality-orchestrator

docs: Add overlap analysis for non-AI coordinator patterns

2026-01-31 14:47:59 -06:00

rejection-handler

feat(#139 ): build Gate Rejection Response Handler

2026-01-31 14:01:42 -06:00

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

fix(#196 ): fix race condition in job status updates

2026-02-02 12:51:17 -06:00

feat(#131 ): add OpenTelemetry tracing infrastructure

2026-01-31 12:55:11 -06:00

fix: address code review issues and cleanup QA reports

2026-01-31 15:01:18 -06:00

chore: Clear technical debt across API and web packages

2026-01-30 18:26:41 -06:00

fix: Resolve CI typecheck failures and improve type safety

2026-01-30 20:39:03 -06:00

fix(#198 ): Strengthen WebSocket authentication

2026-02-02 13:04:34 -06:00

fix: Resolve CI typecheck failures and improve type safety

2026-01-30 20:39:03 -06:00

workspace-settings

fix(api): Add AuthModule import to modules using AuthGuard

2026-02-01 01:48:09 -06:00

app.controller.test.ts

feat(#3 ): Add comprehensive tests and improve Prisma seed script

2026-01-28 16:24:25 -06:00

app.controller.ts

chore: Clear technical debt across API and web packages

2026-01-30 18:26:41 -06:00

app.module.ts

feat(#176 ): Integrate M4.2 infrastructure with M4.1 coordinator

2026-02-01 21:54:34 -06:00

app.service.ts

feat(#1 ): Set up monorepo scaffold with pnpm workspaces + TurboRepo

2026-01-28 13:31:33 -06:00

cors.spec.ts

fix(#192 ): fix CORS configuration for cookie-based authentication

2026-02-02 12:13:17 -06:00

main.ts

fix(#192 ): fix CORS configuration for cookie-based authentication

2026-02-02 12:13:17 -06:00