sagit 961c06655a fix(backend): enforce port range restrictions in federation mode (#125) ...

Added dual-layer port range enforcement for federation sharing:

Server-side (Provider):
- federationRuntimeApplyRole: validate runtime.Port against share range
- validateFederationCommandPorts: hardened against malformed JSON bypass
- New helpers: validateRemoteNodePort, remoteNodePortRange

Client-side (Consumer):
- prepareTunnelCreateState: pre-check ports for remote nodes
- tunnelCreate type=1: validate targetPort for remote entry
- forwardCreate/Update/BatchChangeTunnel: port range validation

Prevents consumers from using arbitrary ports outside provider's allowed range.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

2026-02-15 10:42:39 +00:00

..

app

feat(postgres): add postgres backend support and migration docs

2026-02-12 06:38:25 +00:00

auth

feat: add Go backend compatibility service scaffold

2026-02-06 10:42:48 +00:00

config

fix(tunnel): auto-update entry node IP on every tunnel update

2026-02-13 01:24:48 +00:00

http

fix(backend): enforce port range restrictions in federation mode (#125)

2026-02-15 10:42:39 +00:00

security

feat: add Go backend compatibility service scaffold

2026-02-06 10:42:48 +00:00

store

fix(backend): include forward_port in backup export/import

2026-02-15 01:44:57 +00:00

ws

fix(ws): prevent monitor websocket reconnect loop

2026-02-12 04:25:47 +00:00