Enforce websocket origin allowlist with secure-mode config

2026-02-28 04:47:07 -05:00
parent 9f3cd1fbdc
commit cf30229b37
9 changed files with 87 additions and 1 deletions
--- a/server/app/config.py
+++ b/server/app/config.py
@@ -20,6 +20,7 @@ class NetworkConfigSection(BaseModel):

    max_message_bytes: int = Field(default=2_000_000, gt=0)
    allow_insecure_ws: bool = False
+    allowed_origins: list[str] = Field(default_factory=list)


 class TlsConfigSection(BaseModel):