fix (security/gateway): preserve control-ui scopes in bypass mode

2026-05-08 15:58:27 +00:00 · 2026-02-15 19:12:06 -08:00
parent a203430aa3
commit eed02a2b57
2 changed files with 4 additions and 1 deletions
--- a/src/gateway/server/ws-connection/message-handler.ts
+++ b/src/gateway/server/ws-connection/message-handler.ts
@@ -427,7 +427,7 @@ export function attachGatewayWsMessageHandler(params: {
          close(1008, truncateCloseReason(authMessage));
        };
        if (!device) {
-          if (scopes.length > 0) {
+          if (scopes.length > 0 && !allowControlUiBypass) {
            scopes = [];
            connectParams.scopes = scopes;
          }