vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-02 22:00:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(bluebubbles): throttle webhook auth guesses (#55133)

Browse Source 
* fix(bluebubbles): throttle webhook auth guesses

* test(bluebubbles): isolate attachment ssrf config

* test(bluebubbles): hoist attachment mocks

* docs: refresh bluebubbles config baseline

* fix(bluebubbles): trust proxied webhook client IPs

* fix(bluebubbles): honor trusted proxy webhook IPs

* fix(bluebubbles): honor real-ip fallback for webhooks
This commit is contained in:
Jacob Tomlinson
2026-03-26 07:54:03 -07:00
committed by GitHub
parent 5c3e018492
commit 5e08ce36d5
8 changed files with 237 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
test/helpers/extensions/bluebubbles-monitor.ts
View File

@@ -1,6 +1,9 @@
import { vi } from "vitest";
import type { BlueBubblesHistoryFetchResult } from "../../../extensions/bluebubbles/src/history.js";
import { _resetBlueBubblesShortIdState } from "../../../extensions/bluebubbles/src/monitor.js";
import {
_resetBlueBubblesShortIdState,
clearBlueBubblesWebhookSecurityStateForTest,
} from "../../../extensions/bluebubbles/src/monitor.js";
import type { PluginRuntime } from "../../../extensions/bluebubbles/src/runtime-api.js";
import { setBlueBubblesRuntime } from "../../../extensions/bluebubbles/src/runtime.js";
import { createPluginRuntimeMock } from "./plugin-runtime-mock.js";
@@ -131,6 +134,7 @@ export function resetBlueBubblesMonitorTestState(params: {
}) {
vi.clearAllMocks();
_resetBlueBubblesShortIdState();
clearBlueBubblesWebhookSecurityStateForTest();
params.extraReset?.();
params.fetchHistoryMock.mockResolvedValue({ entries: [], resolved: true });
params.readAllowFromStoreMock.mockResolvedValue([]);