Andrey VasnetsovandClaude Fable 5.1 64156b7e32 Accept only read-write API keys on the internal gRPC API (#10758) ...

With `enforce_internal_auth` enabled, the p2p server reused the public
auth layer. A read-only key or any JWT passed that layer, and the Raft
service does not check per-request access, so those credentials could
add a peer to consensus.

The internal auth layer now runs in a dedicated scope that accepts only
`api_key` and `alt_api_key`. The read-only key, JWTs, and missing or
wrong keys are rejected with Unauthenticated. Warn at startup when
internal auth is enforced with only a read-only key configured, since
peers would have nothing to authenticate with.

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>

2026-09-24 16:15:30 +02:00

..

config.yaml

Accept only read-write API keys on the internal gRPC API (#10758)

2026-09-24 16:15:30 +02:00

deb.yaml

Fix config path & Webui Assets in Debian package (#6958)

2025-07-31 10:02:17 +02:00

development.yaml

Cleanup ConsensusStateMachine validation and docs (#10658)

2026-09-15 18:37:21 +09:00

production.yaml

Remove unused debug setting (#2339)

2023-08-21 13:41:43 +02:00