Add identity envelope middleware to Platform service (fixes 403s)
Platform was the ONLY service missing UseIdentityEnvelopeAuthentication(). Sprint 008 added it to Scanner, JobEngine, Timeline, Integrations, Concelier but missed Platform. This caused ALL context API calls to return 403: - /api/v2/context/regions - /api/v2/context/environments - /api/v2/context/preferences The gateway strips JWT and sends signed identity envelope headers instead. Without the middleware, Platform couldn't read the scopes from the envelope, so every authorization check failed. This also fixes the "Events: DEGRADED" SSE status indicator since the context store's error was caused by these 403 responses. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -311,6 +311,7 @@ if (!string.Equals(bootstrapOptions.Storage.Driver, "memory", StringComparison.O
|
|||||||
app.UseStellaOpsCors();
|
app.UseStellaOpsCors();
|
||||||
app.UseStellaOpsLocalization();
|
app.UseStellaOpsLocalization();
|
||||||
app.UseStellaOpsTelemetryContext();
|
app.UseStellaOpsTelemetryContext();
|
||||||
|
app.UseIdentityEnvelopeAuthentication();
|
||||||
app.UseAuthentication();
|
app.UseAuthentication();
|
||||||
app.UseAuthorization();
|
app.UseAuthorization();
|
||||||
app.UseStellaOpsTenantMiddleware();
|
app.UseStellaOpsTenantMiddleware();
|
||||||
|
|||||||
Reference in New Issue
Block a user