Guard social messaging and Canva at their credential chokepoints

Ya: 25 Agosti 2026, 00:55 UTC
Mwandishi: Kamo
Ahadi ya: 3c74619

SOCIAL_MESSAGING is enforced in SocialCredsResolver.resolve — the narrowest point covering every adapter and both directions. No credentials means no Telegram, Meta, Instagram, X or Discord call can be made at all, inbound webhook verification included, since that HMACs with the same secret. None of those four will sign a BAA at any price, so no engineering moves it. CANVA is enforced on getConnection AND saveConnection. Guarding only the connect would leave an org that was already connected when it became a PHI tenant still able to use it, and the read is what every API call goes through to obtain a token. 213 tests green.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru Milele Mtazamo wa bei