Tak Hoffman dbccc73d7a security(line): synthesize strict LINE auth boundary hardening ...

LINE auth boundary hardening synthesis for inbound webhook authn/z/authz:
- account-scoped pairing-store access
- strict DM/group allowlist boundary separation
- fail-closed webhook auth/runtime behavior
- replay and duplicate handling with in-flight continuity for concurrent redeliveries

Source PRs: #26701, #26683, #25978, #17593, #16619, #31990, #26047, #30584, #18777
Related continuity context: #21955

Co-authored-by: bmendonca3 <208517100+bmendonca3@users.noreply.github.com>
Co-authored-by: davidahmann <46606159+davidahmann@users.noreply.github.com>
Co-authored-by: harshang03 <58983401+harshang03@users.noreply.github.com>
Co-authored-by: haosenwang1018 <167664334+haosenwang1018@users.noreply.github.com>
Co-authored-by: liuxiaopai-ai <73659136+liuxiaopai-ai@users.noreply.github.com>
Co-authored-by: coygeek <65363919+coygeek@users.noreply.github.com>
Co-authored-by: lailoo <20536249+lailoo@users.noreply.github.com>

2026-03-03 00:21:15 -06:00

..

flex-templates

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

accounts.test.ts

fix(channels): add optional defaultAccount routing

2026-03-02 04:03:46 +00:00

accounts.ts

fix(channels): add optional defaultAccount routing

2026-03-02 04:03:46 +00:00

actions.ts

refactor(line): centralize action helpers

2026-02-14 15:39:45 +00:00

auto-reply-delivery.test.ts

refactor(core): dedupe gateway runtime and config tests

2026-02-22 07:44:57 +00:00

auto-reply-delivery.ts

refactor(line): reuse reply chunk deps type

2026-02-16 02:29:07 +00:00

bot-access.ts

fix(security): keep DM pairing allowlists out of group auth

2026-02-26 12:58:18 +01:00

bot-handlers.test.ts

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00

bot-handlers.ts

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00

bot-message-context.test.ts

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00

bot-message-context.ts

fix(line): synthesize media/auth/routing webhook regressions (openclaw#32546) thanks @Takhoffman

2026-03-02 23:47:56 -06:00

bot.ts

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00

channel-access-token.ts

refactor(line): share channel access token resolver

2026-02-15 07:01:05 +00:00

config-schema.ts

fix(channels): add optional defaultAccount routing

2026-03-02 04:03:46 +00:00

download.test.ts

fix(line): synthesize media/auth/routing webhook regressions (openclaw#32546) thanks @Takhoffman

2026-03-02 23:47:56 -06:00

download.ts

fix(line): synthesize media/auth/routing webhook regressions (openclaw#32546) thanks @Takhoffman

2026-03-02 23:47:56 -06:00

flex-templates.test.ts

test: remove redundant list-card action passthrough case

2026-02-16 07:45:09 +00:00

flex-templates.ts

refactor(line): split flex template builders

2026-02-13 19:08:37 +00:00

markdown-to-line.test.ts

test: dedupe channel and transport adapters

2026-02-21 21:44:01 +00:00

markdown-to-line.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

monitor.fail-closed.test.ts

style(line): format files to unblock ci check

2026-02-16 03:39:41 +00:00

monitor.lifecycle.test.ts

fix(line): mark webhook route as plugin-authenticated

2026-03-02 16:27:47 +00:00

monitor.read-body.test.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

monitor.ts

refactor(gateway): harden plugin http route contracts

2026-03-02 16:48:00 +00:00

probe.test.ts

test(core): trim redundant test resets and use mockClear

2026-02-22 08:12:55 +00:00

probe.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

reply-chunks.test.ts

test(line): dedupe reply chunk fixture setup

2026-02-18 13:06:08 +00:00

reply-chunks.ts

chore: Enable more lint rules, disable some that trigger a lot. Will clean up later.

2026-01-31 16:04:04 +09:00

rich-menu.test.ts

test: dedupe channel and transport adapters

2026-02-21 21:44:01 +00:00

rich-menu.ts

refactor(line): share rich menu user batching

2026-02-18 18:30:23 +00:00

send.test.ts

fix(line): harden outbound send behavior

2026-02-22 11:29:31 +00:00

send.ts

fix(line): harden outbound send behavior

2026-02-22 11:29:31 +00:00

signature.ts

line: centralize webhook signature validation

2026-01-26 19:21:26 -06:00

template-messages.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

template-messages.ts

test: dedupe auto-reply web and signal flows

2026-02-22 17:11:54 +00:00

types.ts

fix(channels): add optional defaultAccount routing

2026-03-02 04:03:46 +00:00

webhook-node.test.ts

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00

webhook-node.ts

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00

webhook-utils.ts

refactor(line): extract node webhook handler + shared verification

2026-02-15 00:59:32 +01:00

webhook.test.ts

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00

webhook.ts

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00