- Ya
- 2 Julai 2026, 21:42 UTC
- Mwandishi
- Kamo
- Ahadi ya
- ced77ee
Add an MLOS-named, read-only proxy that lets the kamo-internal Capital & Risk Command Center reach MLOSCapitalMarketsService without exposing the internal network or secret to the browser: - MlosBaseController: self-contained OTK-session helpers (org + operator/god gate). Does NOT extend the hard-money LOS base and introduces no LOS-named right — MLOS is a distinct system. - MlosCapitalMarketsController @ **************** resolves the operator org from the session, gates on operator (god-mode), injects the operator's own organizationId into the org-scoped MLOS reads (never a client value), and fail-closes the composite by-id reads against cross-org access. - MlosCapitalMarketsClient: RestTemplate to kamomloscapitalmarkets-service with the shared X-Internal-Auth secret (organizationId passed as query param). - configmap: mlos.capital-markets.url (env-overridable). Reuses the already-wired internal.auth.secret. Reached via APIService's blanket /api/security/** relay.