fix: Gateway canvas host bypasses auth and serves files unauthenticated

This commit is contained in:
Coy Geek
2026-02-05 01:21:06 -08:00
committed by George Pickett
parent 05b28c147d
commit 47538bca4d
2 changed files with 72 additions and 8 deletions

View File

@@ -164,7 +164,12 @@ export async function createGatewayRuntimeState(params: {
maxPayload: MAX_PAYLOAD_BYTES,
});
for (const server of httpServers) {
attachGatewayUpgradeHandler({ httpServer: server, wss, canvasHost });
attachGatewayUpgradeHandler({
httpServer: server,
wss,
canvasHost,
resolvedAuth: params.resolvedAuth,
});
}
const clients = new Set<GatewayWsClient>();