Skip to content

Deduplicate withAuth by delegating to ApplyAuth#115

Merged
haasonsaas merged 1 commit intomainfrom
fix/dedup-withauth
Apr 12, 2026
Merged

Deduplicate withAuth by delegating to ApplyAuth#115
haasonsaas merged 1 commit intomainfrom
fix/dedup-withauth

Conversation

@haasonsaas
Copy link
Copy Markdown
Contributor

Summary

withAuth and ApplyAuth in controlplaneclient both set the same auth headers. Make withAuth delegate to ApplyAuth so there's one source of truth.

Addresses remaining Bugbot feedback from #113.

Test plan

  • go build ./... passes
  • go test ./internal/controlplaneclient/... passes

🤖 Generated with Claude Code

Single source of truth for auth header logic.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@cursor
Copy link
Copy Markdown

cursor bot commented Apr 12, 2026

PR Summary

Low Risk
Low risk refactor that centralizes auth header application; behavior should remain the same but could affect all control-plane requests if ApplyAuth diverges.

Overview
withAuth in internal/controlplaneclient/client.go no longer sets Authorization and X-Org-Id headers inline, and instead delegates to ApplyAuth to deduplicate auth header logic.

This makes ApplyAuth the single source of truth for control-plane request authentication.

Reviewed by Cursor Bugbot for commit 067140d. Bugbot is set up for automated code reviews on this repo. Configure here.

@haasonsaas haasonsaas merged commit ef2c0a8 into main Apr 12, 2026
8 checks passed
@haasonsaas haasonsaas deleted the fix/dedup-withauth branch April 12, 2026 02:39
haasonsaas added a commit that referenced this pull request Apr 12, 2026
- Restore RealIP + rate limiter + body size + security headers on
  ConnectRPC path (lost during rebase from pre-#113 branch)
- Replace authReq with controlplaneclient.ApplyAuth (dedup from #113)
- Replace OutgoingHeaders with ApplyAuth (dedup from #115)
- withAuth delegates to ApplyAuth

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
haasonsaas added a commit that referenced this pull request Apr 12, 2026
* Import identity types from shared proto package

Remove local Organization, OrgMember, APIKey message definitions from
tenant.proto and import canonical types from identity/v1. Update all
converter functions, clients, and tests.

Closes #110

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Replace audit.Entry with shared auditv1.Event

Swap hand-written Entry struct for auditv1.Event from shared proto.
Sink interface accepts []*auditv1.Event. Logger methods construct proto
events with nested Actor/Resource. Metadata field overwrite prevented
by setting dedicated fields last. CI updated with shared proto symlinks
for buf lint and tenant.proto excluded from buf breaking during migration.

Closes #108

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Address review feedback: restore middleware, deduplicate auth helpers

- Restore RealIP + rate limiter + body size + security headers on
  ConnectRPC path (lost during rebase from pre-#113 branch)
- Replace authReq with controlplaneclient.ApplyAuth (dedup from #113)
- Replace OutgoingHeaders with ApplyAuth (dedup from #115)
- withAuth delegates to ApplyAuth

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant