d-bis/smom-dbis-138
6
0
Fork 0
Code Issues Pull Requests 3 Actions Packages Projects Releases Wiki Activity

fix(omnl): expose GUOSMM gazette registry without API key in production
Some checks failed
CI/CD Pipeline / Solidity Contracts (push) Failing after 1m17s
Details
CI/CD Pipeline / Security Scanning (push) Successful in 2m21s
Details
CI/CD Pipeline / Lint and Format (push) Failing after 52s
Details
CI/CD Pipeline / Terraform Validation (push) Failing after 26s
Details
CI/CD Pipeline / Kubernetes Validation (push) Successful in 25s
Details
HYBX OMNL TypeScript & anchor / token-aggregation build + reconcile artifact (push) Failing after 22s
Details
Validation / validate-genesis (push) Successful in 30s
Details
Validation / validate-terraform (push) Failing after 28s
Details
Validation / validate-kubernetes (push) Failing after 12s
Details
Validation / validate-smart-contracts (push) Failing after 12s
Details
Validation / validate-security (push) Failing after 1m25s
Details
Validation / validate-documentation (push) Failing after 23s
Details

Browse Source 
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
zaragoza444
2026-07-03 02:24:59 -07:00
parent 92d3916e70
commit f13691c72f
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
services/token-aggregation/src/api/middleware/omnl-guards.ts
View File

@@ -50,6 +50,7 @@ const OMNL_PUBLIC_PATH_SUFFIXES = ['/omnl/openapi.json', '/omnl/catalog', '/omnl
function isPublicOmnlPath(path: string): boolean {
if (OMNL_PUBLIC_PATH_SUFFIXES.some((s) => path.endsWith(s))) return true;
if (path.startsWith('/omnl/gazette/')) return true;
// Compliance console is read-only; allow without API key when explicitly enabled (LAN operator UI).
if (process.env.OMNL_COMPLIANCE_CONSOLE_PUBLIC === '1' && isComplianceConsolePath(path)) return true;
return false;