Security context

Highlights

Auth Bypass: 24 prior fixes. Scrutinize any change in this area.

api/server/auth/auth.go: most-fixed (7 issues). Treat as high-risk during review.

21 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: The gateway's host and domain evaluation logic historically suffered from multiple bypasses, including domain validation flaws, incorrect TLD suffix parsing, and improper fallback behavior during namespace extraction. Subdomain spoofing or malformed HTTP host headers could allow requests to fallback into incorrect default namespaces.

Auth Bypass: The core rule verification engine incorrectly evaluated empty scopes and unauthenticated requests against wildcard '*' policies, leading to accidental permission grants. Additional flaws in intermediate rule evaluation returned premature DENIED results, disrupting overall access evaluation.

Auth Bypass: Middleware wrappers responsible for authorization checks failed to correctly isolate cross-namespace requests, constructed default unauthenticated accounts without proper namespace metadata propagation, and suffered from nil pointer dereferences on unauthenticated requests.