actionauthorui

package
v1.331.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Nov 13, 2026 License: AGPL-3.0 Imports: 21 Imported by: 0

Documentation

Overview

Package actionauthorui serves the action author chat UI (agents/action-author-ui) under PathPrefix/<session id>/ through a reverse proxy scoped to one session.

The UI service has no authentication of its own and is reachable only through this proxy, so the proxy is the security boundary:

  • the caller is a Credimi user authenticated by the `pb_auth` cookie (temporalui.Caller), and the session must be one Credimi started for the caller's organization (activities.TrustedActionAuthorSession);
  • only the user who started the session can reach its chat; other users get 404, as for a session that does not exist;
  • the service learns the session's namespace, its chat workflow and its Temporal token only from NamespaceHeader, ChatHeader and TokenHeader, which the proxy always overwrites; the token grants only that namespace;
  • only the routes the embedded chat needs reach the service, and every route naming a workflow must name the session's chat;
  • state-changing requests must come from Credimi's own origin.

Index

Constants

View Source
const (
	// NamespaceHeader carries the namespace the session runs in to the service.
	NamespaceHeader = "X-Credimi-Namespace"
	// ChatHeader carries the session's chat workflow ID to the service.
	ChatHeader = "X-Credimi-Action-Author-Chat"
	// TokenHeader carries the service's Temporal token for that namespace
	// (temporalauth.NamespaceToken).
	TokenHeader = "X-Credimi-Temporal-Token"
)
View Source
const PathPrefix = "/action-author-ui"

PathPrefix is the public path of the embedded chat UI.

Variables

This section is empty.

Functions

func Handler

func Handler(target *url.URL) func(*core.RequestEvent) error

Handler proxies PathPrefix requests to the chat UI service at target.

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL