fix(auth): compare API keys at the raw ASGI boundary - #520

Draft

seonghobae wants to merge 13 commits into

mainfrom

sentinel/fix-hmac-non-ascii-1412282215803553404

Commits on Sep 2, 2026

🛡️ Sentinel: [MEDIUM] hmac.compare_digest의 Non-ASCII 예외 처리 수정
seonghobae
committed
a67bc12

Commits on Sep 3, 2026

🛡️ Sentinel: [MEDIUM] hmac.compare_digest의 Non-ASCII 예외 처리 수정
seonghobae
committed
4710e64
test(auth): expose valid Unicode API-key mismatch at ASGI boundary
seonghobae
committed
8f7cdb8
🛡️ Sentinel: [MEDIUM] hmac.compare_digest의 Non-ASCII 예외 처리 수정
seonghobae
committed
2f09917
test(auth): reject duplicated raw API key headers
seonghobae
committed
bd126a0
fix(auth): compare exactly one raw API key header
seonghobae
committed
4e8f965
🛡️ Sentinel: [MEDIUM] hmac.compare_digest의 Non-ASCII 예외 처리 수정
seonghobae
committed
9777cc0
docs(auth): remove inaccurate sentinel transport note
seonghobae
committed
fa241e0
chore(auth): adopt current protected main without rewriting auth repair
seonghobae
committed
9ee4627
docs(auth): record raw-header API-key contract
seonghobae
committed
66f6040
docs(auth): align sentinel guidance with raw ASGI boundary
seonghobae
committed
cf730d0

Commits on Sep 4, 2026