feat(auth): org IP allowlisting — member network restrictions#5872

Open

waleedlatif1 wants to merge 8 commits into

feat/org-ip-allowlist

Commits on Jul 22, 2026

feat(auth): org IP allowlisting — member network restrictions across sign-in, sessions, API keys, realtime
waleedlatif1
committed

Commits on Jul 23, 2026

improvement(network-policy): getSession chokepoint enforcement, per-entry labels, denial audit events, shared proxy helpers, lazy IP resolution
waleedlatif1
committed
polish(network-policy): fix orphaned TSDoc, trim narration comments, tidy hint JSX
waleedlatif1
committed
fix(network-policy): enforce on v1 API path, isTruthy break-glass, mapped-CIDR matching, realtime fail-open+audit consistency, drop dead exports
waleedlatif1
committed
fix(network-policy): enforce at customSession get-session chokepoint (covers client session), match realtime break-glass to isTruthy
waleedlatif1
committed
fix(network-policy): gate socket-token minting via enforcing getSession (app-side primary socket gate)
waleedlatif1
committed
fix(network): canonicalize IPv4-mapped IPv6 on numeric value so all textual forms (compressed/expanded/hex) match uniformly
waleedlatif1
committed
fix(realtime): bound socket denial-audit throttle map to match app-side cap
waleedlatif1
committed