ext/openworker
2
0
Fork 0
mirror of https://github.com/andrewyng/openworker.git synced 2026-09-13 15:50:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

security: harden Slack approval handling

Browse Source
This commit is contained in:
Rohit P
2026-07-24 22:33:13 -07:00
parent 56b3c62864
commit 7656952692
21 changed files with 931 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files
coworker/server/app.py
+15 -2
View File
@@ -371,12 +371,11 @@ def create_app(manager: SessionManager) -> FastAPI:
name = str(body.get("name", "")).strip()
if not name:
return {"ok": False, "error": "binding needs a `name`"}
manager.inbox_routing.set_binding(
return manager.set_inbox_binding(
name,
channel=body.get("channel") or None,
target=str(body.get("target", "")),
)
return {"ok": True, "bindings": manager.inbox_routing.bindings()}
@app.get("/v1/sessions/{session_id}/unattended")
def get_unattended(session_id: str) -> dict[str, Any]:
@@ -1245,6 +1244,20 @@ def create_app(manager: SessionManager) -> FastAPI:
name, str(body.get("user_id", "")), str(body.get("team_id", "")) or None
)
@app.post("/v1/connectors/slack/approval-owners/add")
def slack_approval_owner_add(body: dict) -> dict[str, Any]:
return manager.set_slack_approval_owner(
str(body.get("user_id", "")),
add=True,
display_name=str(body.get("name", "")),
)
@app.post("/v1/connectors/slack/approval-owners/remove")
def slack_approval_owner_remove(body: dict) -> dict[str, Any]:
return manager.set_slack_approval_owner(
str(body.get("user_id", "")), add=False
)
# -- audit / browser observability ------------------------------------------
@app.get("/v1/audit")
def audit_list(