Skip to content

fix(v7.0.1): unified auth, telemetry propagation, example credentials#346

Merged
saurabhjain1592 merged 1 commit intomainfrom
sync/enterprise-20260410-235726-24269559620
Apr 11, 2026
Merged

fix(v7.0.1): unified auth, telemetry propagation, example credentials#346
saurabhjain1592 merged 1 commit intomainfrom
sync/enterprise-20260410-235726-24269559620

Conversation

@saurabhjain1592
Copy link
Copy Markdown
Member

v7.0.1 Community Sync

Summary

  • Commits synced: 4 (PRs #1572, #1573, #1574, #1575)
  • Files changed: ~144

Highlights

  • Unified authentication across all endpoints (fixes community-saas 401s)
  • Telemetry now tracks all authenticated requests in community-saas mode
  • 139 example files standardized for credential handling
  • Next.js security patch (GHSA-q4gf-8mx6-v5v3)

Review Checklist

  • No enterprise-only content included
  • CI checks pass
  • Tag v7.0.1 after merge

### Fixed

- Authentication on all endpoints — unified auth across gateway, MCP, proxy,
  and API routes. Fixes 401 errors on community-saas for gateway pre-check,
  audit, proxy, and MCP endpoints.
- Community mode tenant isolation — requests now preserve per-tenant scoping.
  Previously all requests collapsed to a single synthetic client.
- Telemetry tracking — all authenticated requests including MCP and JSON-RPC
  sessions now correctly record telemetry in community-saas mode.
- Audit identity — uses authenticated client identity instead of trusting
  request body, preventing cross-tenant attribution.
- MCP server DB auth — JSON-RPC handler validates DB-registered clients,
  not just the in-memory whitelist.
- Example credentials — 139 example files updated to read auth from env vars.
- Deploy workflow — stack discovery excludes auxiliary services.
- Next.js security update to 16.2.3 (GHSA-q4gf-8mx6-v5v3).

Source Commits: 29131995,aaf7cfc6,d0f04d84,7d0f1021
@saurabhjain1592 saurabhjain1592 added the community-sync Sync from enterprise repository label Apr 10, 2026
@saurabhjain1592 saurabhjain1592 added this pull request to the merge queue Apr 11, 2026
Merged via the queue into main with commit 60733e3 Apr 11, 2026
29 checks passed
@saurabhjain1592 saurabhjain1592 deleted the sync/enterprise-20260410-235726-24269559620 branch April 11, 2026 00:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

community-sync Sync from enterprise repository

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant