Record the ProxyHmacFilter rollout and what it does not cover

Docskamo-internal
Ya
15 Agosti 2026, 14:16 UTC
Mwandishi
kamo
Ahadi ya
11a1752

Two ordered steps, the checks that made the second one safe, and the reason the order matters: kamo-internal had to be signing before KamoLOS started validating, or every loan request would have been rejected. Also states plainly that HMAC does not replace the org checks. It raises X-Org-Id from "a header someone sent" to "a header this proxy sent"; LoanService and LoanScope still decide whether that org may see the row.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru MileleMtazamo wa bei