Jason Woltje 38695b3bb8 feat(#286): Add workspace access validation to federation endpoints ...

Security improvements:
- Apply WorkspaceGuard to all workspace-scoped federation endpoints
- Enforce workspace membership verification via Prisma
- Prevent cross-workspace access attacks
- Add comprehensive test coverage for workspace isolation

Changes:
- Add WorkspaceGuard to federation connection endpoints:
  - POST /connections/initiate
  - POST /connections/:id/accept
  - POST /connections/:id/reject
  - POST /connections/:id/disconnect
  - GET /connections
  - GET /connections/:id
- Add workspace-access.integration.spec.ts with tests for:
  - Workspace membership verification
  - Cross-workspace access prevention
  - Multiple workspace ID sources (header, param, body)

Part of M7.1 Remediation Sprint P1 security fixes.

Fixes #286

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

2026-02-03 21:50:13 -06:00

..

completed

Fix QA validation issues and add M7.1 security fixes (#318)

2026-02-04 03:08:09 +00:00

escalated

feat(#93): implement agent spawn via federation

2026-02-03 14:37:06 -06:00

pending

feat(#286): Add workspace access validation to federation endpoints

2026-02-03 21:50:13 -06:00

processed

Fix QA validation issues and add M7.1 security fixes (#318)

2026-02-04 03:08:09 +00:00

SUMMARY_2026-02-03.md

Fix QA validation issues and add M7.1 security fixes (#318)

2026-02-04 03:08:09 +00:00