klesh opened a new pull request, #8879: URL: https://github.com/apache/incubator-devlake/pull/8879
### Summary - [x] I have read through the [Contributing Documentation](https://devlake.apache.org/community/). - [x] I have added relevant tests. - [x] I have added relevant documentation. - [x] I will add labels to the PR, such as `pr-type/bug-fix`, `pr-type/feature-development`, etc. ### Summary - default-denies the push API unless `PUSH_API_ALLOWED_TABLES` is explicitly configured - blocks writes to internal `_devlake_*` tables even if they are mistakenly added to the allowlist - requires a Bearer API key on `/push/*` regardless of `AUTH_ENABLED`, and adds focused middleware and validation tests ### Does this close any open issues? Closes N/A ### Screenshots N/A ### Other Information - updated `env.example` and `backend/server/api/push/README.md` to reflect the secure push API defaults - added coverage in `backend/server/api/middlewares_test.go` and `backend/server/services/pushapiaccess/access_test.go` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
