Documentation
¶
Overview ¶
Package actionauthorui serves the action author chat UI (agents/action-author-ui) under PathPrefix/<session id>/ through a reverse proxy scoped to one session.
The UI service has no authentication of its own and is reachable only through this proxy, so the proxy is the security boundary:
- the caller is a Credimi user authenticated by the `pb_auth` cookie (temporalui.Caller), and the session must be one Credimi started for the caller's organization (activities.TrustedActionAuthorSession);
- only the user who started the session can reach its chat; other users get 404, as for a session that does not exist;
- the service learns the session's namespace, its chat workflow and its Temporal token only from NamespaceHeader, ChatHeader and TokenHeader, which the proxy always overwrites; the token grants only that namespace;
- only the routes the embedded chat needs reach the service, and every route naming a workflow must name the session's chat;
- state-changing requests must come from Credimi's own origin.
Index ¶
Constants ¶
View Source
const ( // NamespaceHeader carries the namespace the session runs in to the service. NamespaceHeader = "X-Credimi-Namespace" // ChatHeader carries the session's chat workflow ID to the service. ChatHeader = "X-Credimi-Action-Author-Chat" // TokenHeader carries the service's Temporal token for that namespace // (temporalauth.NamespaceToken). TokenHeader = "X-Credimi-Temporal-Token" )
View Source
const PathPrefix = "/action-author-ui"
PathPrefix is the public path of the embedded chat UI.
Variables ¶
This section is empty.
Functions ¶
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.