feat: Add trusted proxy email authentication for Cloud Run + IAP agent access#19

Open

adhishthite wants to merge 8 commits into

EveryInc:mainfrom

adhishthite:main

Commits on Mar 12, 2026

Initial plan
Copilot
committed
feat: support trusted proxy email auth for IAP deployments

Copilot
and
adhishthite
committed
chore: add rate limiting to document access auth routes

Copilot
and
adhishthite
committed
fix: redact trusted proxy allowlists from discovery endpoint

Adhish
authored and
Adhish
committed
fix: default trusted headers to only x-goog-authenticated-user-email

Adhish
authored and
Adhish
committed
fix: reject ownerId mismatch for trusted proxy email auth

Adhish
authored and
Adhish
committed
fix: harden trusted proxy ownerId validation

Adhish
authored and
Adhish
committed
Merge pull request #1 from adhishthite/copilot/configure-access-for-agents
adhishthite
authored