fix(security): validate X-User-Id against trusted owner whitelist to prevent BOLA#2023

Open

namann5 wants to merge 3 commits into

utksh1:mainfrom

namann5:fix/bola-x-user-id-header-auth-bypass

Commits on Jul 14, 2026

fix(security): validate X-User-Id against trusted owner whitelist to prevent BOLA
namann5
committed

Commits on Jul 15, 2026

fix(security): bind X-User-Id to trusted proxy IP instead of client-controlled whitelist
namann5
committed
Merge branch 'main' into fix/bola-x-user-id-header-auth-bypass
namann5
authored