feat: multi-tenant auth with per-user scoping

Browse Source

Multi-user authentication and authorization for IronClaw gateway:
- Token-based auth mapping tokens to user IDs via GATEWAY_USER_TOKENS
- Per-user SSE broadcast scoping
- Per-user rate limiting with poisoned lock recovery
- Handler auth and ownership checks for jobs, settings, routines
- Extension secrets scoped per-user
- Chat handlers use authenticated identity
- Reverse proxy deployment documentation
- Comprehensive integration tests for auth, SSE, rate limiting, and job isolation

...

This commit is contained in:

Andrew Preece

2026-03-23 18:01:00 +00:00

parent 485d1568c4

commit b394c0cfdd

31 changed files with 3167 additions and 696 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

src/extensions/manager.rs

+234 -225

File diff suppressed because it is too large Load Diff