🛡️ Sentinel: Fix signature verification bypass for Kafka, Mongo, and Redis proxy actions - #136

Open

blue4209211 wants to merge 11 commits into

mainfrom

sentinel/fix-proxy-action-signatures

Commits on Aug 13, 2026

🛡️ Sentinel: Fix signature verification bypass for Kafka, Mongo, and Redis proxy actions
blue4209211
committed
6a8ce8b
test(ws): dynamically iterate over signedActions in TestHandler_SignedActionsEnforcement
blue4209211
committed
82faf99
refactor(ws): enforce fail-closed signature verification for all incoming messages
blue4209211
committed
7759418
refactor(ws): remove redundant verifier.Enabled() check in HandleMessage
blue4209211
committed
fd251b9
fix(signing): include test_datasource_config and legacy HTTP fields in SigningFields
blue4209211
committed
6544554
test(signing): add TestSignAndVerify_LegacyAction_AntiTamper
blue4209211
committed
f693c85
fix(ws): add defensive nil check for verifier in HandleMessage
blue4209211
committed
173fe17
fix(signing): sign body object for legacy action requests to prevent payload tampering
blue4209211
committed
d880523
fix(signing): robustly detect legacy action requests using body.action_name
blue4209211
committed
177cb58

Commits on Aug 14, 2026