feat: implement TASK-WP1-04 admin security

This commit is contained in:
suyx
2026-07-28 18:32:50 +08:00
parent 66fe3b763a
commit 03f1509de7
29 changed files with 2344 additions and 40 deletions
+4 -2
View File
@@ -5,11 +5,13 @@ import { initializeWorkerCredentialClient, receiveWorkerCredentials } from "../a
const marker = `wp0-${Date.now().toString(36)}`;
const api = await receiveApiCredentials(Readable.from([Buffer.from(JSON.stringify({
"Dada/P0A/admin/pepper": `${marker}-admin-pepper-value-00000000`,
"Dada/P0A/api/amap": `${marker}-map`,
"Dada/P0A/api/resend": `${marker}-mail`,
}))]));
initializeApiCredentialClients(api);
const apiClients = initializeApiCredentialClients(api);
if (Object.values(api).some(Boolean)) throw new Error("API credential receive object was not cleared after client initialization.");
apiClients.adminAllowlistPepper.fill(0);
const worker = await receiveWorkerCredentials(Readable.from([Buffer.from(JSON.stringify({
"Dada/P0A/worker/ai-gateway": `${marker}-ai`,
@@ -17,4 +19,4 @@ const worker = await receiveWorkerCredentials(Readable.from([Buffer.from(JSON.st
initializeWorkerCredentialClient(worker);
if (Object.values(worker).some(Boolean)) throw new Error("Worker credential receive object was not cleared after client initialization.");
console.log(JSON.stringify({ api_scope: "resend_amap", receive_buffer: "cleared", status: "passed", worker_scope: "ai_gateway" }));
console.log(JSON.stringify({ api_scope: "resend_amap_admin_pepper", receive_buffer: "cleared", status: "passed", worker_scope: "ai_gateway" }));