fetch_ml/internal/auth
Jeremie Fraeys 37c4d4e9c7
feat(crypto,auth): harden KMS and improve permission handling
KMS improvements:
- cache.go: add LRU eviction with memory-bounded caches
- provider.go: refactor provider initialization and key rotation
- tenant_keys.go: per-tenant key isolation with envelope encryption

Auth layer updates:
- hybrid.go: refine hybrid auth flow for API key + JWT
- permissions_loader.go: faster permission caching with hot-reload
- validator.go: stricter validation with detailed error messages

Security middleware:
- security.go: add rate limiting headers and CORS refinement

Testing and benchmarks:
- Add KMS cache and protocol unit tests
- Add KMS benchmark tests for encryption throughput
- Update KMS integration tests for tenant isolation
2026-03-12 12:04:32 -04:00
..
api_key.go fix: add CGO build tags to consistency tests, remove unused isHex function 2026-03-08 13:10:00 -04:00
crypto.go refactor(api): internal refactoring for TUI and worker modules 2026-02-20 15:51:23 -05:00
database.go feat(auth): add token-based access and structured logging 2026-03-08 12:51:07 -04:00
flags.go feat(auth): add token-based access and structured logging 2026-03-08 12:51:07 -04:00
hybrid.go feat(crypto,auth): harden KMS and improve permission handling 2026-03-12 12:04:32 -04:00
keychain.go refactor(auth): add tenant scoping and permission enhancements 2026-02-26 12:06:08 -05:00
permissions.go feat(auth): add token-based access and structured logging 2026-03-08 12:51:07 -04:00
permissions_loader.go feat(crypto,auth): harden KMS and improve permission handling 2026-03-12 12:04:32 -04:00
tokens.go feat(auth): add token-based access and structured logging 2026-03-08 12:51:07 -04:00
validator.go feat(crypto,auth): harden KMS and improve permission handling 2026-03-12 12:04:32 -04:00