Skip to content

feat: mints a secret for each request - #18685

Open
mutianf wants to merge 5 commits into
bigtable-accelfrom
accel5
Open

mutianf wants to merge 5 commits into
bigtable-accelfrom
accel5

Conversation

@mutianf

@mutianf mutianf commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

Thank you for opening a Pull Request! Before submitting your PR, there are a few things you can do to make sure it goes smoothly:

  • Make sure to open an issue as a bug/issue before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea
  • Ensure the tests and linter pass
  • Code coverage does not decrease (if any source code was changed)
  • Appropriate docs were updated (if necessary)

Fixes #<issue_number_goes_here> 🦕


Stack created with GitHub Stacks CLI • Give Feedback 💬

@mutianf
mutianf requested a review from a team as a code owner October 13, 2026 19:56
@mutianf
mutianf added this pull request to stack #18689 October 13, 2026 19:56
@mutianf
mutianf requested a review from sushanb October 13, 2026 19:57

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces a security mechanism for the AcceleratorDaemon by generating a 256-bit URL-safe authentication secret upon startup and writing it to the daemon's stdin. The sync and async accelerator clients are updated to pass this secret as metadata (x-accelerator-token) in their RPC calls. Additionally, the client now handles _AcceleratorUnverified exceptions by falling back to the native client with a warning. Unit tests have been added to verify the secret generation and handling. Feedback suggests adding defensive checks to ensure self._proc and self._proc.stdin are initialized before writing to stdin, which would also allow the removal of type: ignore comments.

@mutianf
mutianf removed this pull request from stack #18689 October 13, 2026 20:06
@mutianf
mutianf added this pull request to stack #18691 October 13, 2026 20:07
Change-Id: I33e67c9868b186353eff3857406b62ffbfa97eb2
…se for explicit-mode

Change-Id: I030357650201f8681a31d3135cbbff726a4aa650
…rror

Change-Id: I8d4bf5acf04b72af47e6d65829b41d7d8d800165

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants