Security context

Highlights

Auth Bypass: 5 prior fixes. Scrutinize any change in this area.

backend/openapi-service/app/dependencies/__init__.py: most-fixed (1 issue). Treat as high-risk during review.

6 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: The authentication filter previously evaluated public path allowlists without canonicalizing or normalizing target paths first. Attackers can exploit path traversal sequences or inconsistent path decoding to bypass authorization checks and reach protected resources anonymously.

Auth Bypass: User authentication relied on parsing JWT identity tokens without validating their cryptographic signature against an application certificate, allowing attackers to forge arbitrary identity claims and bypass authenticating controls entirely.

Auth Bypass: Critical scheduler HTTP and WebSocket interfaces were exposed to external clients due to the lack of local access IP validation and failure to bind services strictly to local loopback interfaces.