fusion/.changeset/fn-4871-inbound-sync-empty-bearer.md at c51d0d9d9b9b27e99c58bbffa86404b82b7a2a6d

Files

Fusion (runfusion.ai) a08e94477b feat(FN-4871): complete Step 4 — add security changeset

Fusion-Task-Id: FN-4871
Fusion-Task-Lineage: afa2af88-9c7d-4809-bf8f-2aa6cf79ce40

2026-05-17 04:20:00 -07:00

313 B

Raw Blame History

@runfusion/fusion

@runfusion/fusion
patch

Inbound node settings sync (/api/settings/sync-receive, /auth-receive, /auth-export) now rejects requests when the local node apiKey is empty/missing or the Bearer token is empty, closing an Authorization: Bearer bypass against unconfigured nodes. FN-4868 gap G-01.

313 B Raw Blame History

313 B

Raw Blame History