fix(workflows): harden workflow API auth routes#3559

Open

PlaneInABottle wants to merge 21 commits intosimstudioai:stagingfrom

PlaneInABottle:fix/workflow-api-auth-hardening

Commits on Mar 14, 2026

fix(workflows): tighten shared workflow access validation

PlaneInABottle
authored and
test
committed
fix(workflows): allow app auth on workflow lifecycle actions

PlaneInABottle
authored and
test
committed
fix(workflows): support app auth on deployment routes

PlaneInABottle
authored and
test
committed
fix: harden workflow API auth routes

authored and
test
committed
fix: harden workflow API auth follow-ups

authored and
test
committed
fix: align workflow audit actors for API keys

authored and
test
committed
fix: align workflow audit metadata helpers

PlaneInABottle
authored and
test
committed
refactor: inline workflow access wrappers

PlaneInABottle
authored and
test
committed
test(workflows): fix auth route lint issues
test
committed
fix(workflows): sync MCP tools on revert
test
committed
test(workflows): stabilize async route queue mocks
test
committed
fix(workflows): enforce deployment patch auth ordering
test
committed
test(workflows): reset async route mocks between tests
test
committed
test(workflows): deflake workflow route auth tests
test
committed
fix(workflows): preserve auth ordering and harden async tests
test
committed
test(workflows): fix AuthType mock shape in async route test
test
committed
Merge upstream/staging into fix/workflow-api-auth-hardening
test
committed
fix(workflows): harden deployment auth and audit actor metadata
test
committed
fix(workflows): remove dead deployment actor guard
test
committed
fix(workflows): scope workspace API keys to workflow access
test
committed

Commits on Mar 15, 2026

fix(workflows): use AuthType enum in middleware auth checks
test
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(workflows): harden workflow API auth routes#3559

fix(workflows): harden workflow API auth routes#3559
PlaneInABottle wants to merge 21 commits intosimstudioai:stagingfrom
PlaneInABottle:fix/workflow-api-auth-hardening

Commits on Mar 14, 2026

fix(workflows): tighten shared workflow access validation

fix(workflows): allow app auth on workflow lifecycle actions

fix(workflows): support app auth on deployment routes

fix: harden workflow API auth routes

fix: harden workflow API auth follow-ups

fix: align workflow audit actors for API keys

fix: align workflow audit metadata helpers

refactor: inline workflow access wrappers

test(workflows): fix auth route lint issues

fix(workflows): sync MCP tools on revert

test(workflows): stabilize async route queue mocks

fix(workflows): enforce deployment patch auth ordering

test(workflows): reset async route mocks between tests

test(workflows): deflake workflow route auth tests

fix(workflows): preserve auth ordering and harden async tests

test(workflows): fix AuthType mock shape in async route test

Merge upstream/staging into fix/workflow-api-auth-hardening

fix(workflows): harden deployment auth and audit actor metadata

fix(workflows): remove dead deployment actor guard

fix(workflows): scope workspace API keys to workflow access

Commits on Mar 15, 2026

fix(workflows): use AuthType enum in middleware auth checks