feat(auth): org IP allowlisting — member network restrictions - #5872

Open

waleedlatif1 wants to merge 9 commits into

feat/org-ip-allowlist

Commits on Jul 22, 2026

feat(auth): org IP allowlisting — member network restrictions across sign-in, sessions, API keys, realtime
waleedlatif1
committed
91e2e4d

Commits on Jul 23, 2026

improvement(network-policy): getSession chokepoint enforcement, per-entry labels, denial audit events, shared proxy helpers, lazy IP resolution
waleedlatif1
committed
ad8211b
polish(network-policy): fix orphaned TSDoc, trim narration comments, tidy hint JSX
waleedlatif1
committed
b50f238
fix(network-policy): enforce on v1 API path, isTruthy break-glass, mapped-CIDR matching, realtime fail-open+audit consistency, drop dead exports
waleedlatif1
committed
bad68ac
fix(network-policy): enforce at customSession get-session chokepoint (covers client session), match realtime break-glass to isTruthy
waleedlatif1
committed
83ba26e
fix(network-policy): gate socket-token minting via enforcing getSession (app-side primary socket gate)
waleedlatif1
committed
2ca9a67
fix(network): canonicalize IPv4-mapped IPv6 on numeric value so all textual forms (compressed/expanded/hex) match uniformly
waleedlatif1
committed
a989e3b
fix(realtime): bound socket denial-audit throttle map to match app-side cap
waleedlatif1
committed
a073439
fix(network): resolve IPv6 at /128 for allowlist matching (was masked to /64); document self-host proxy/break-glass/fail-open
waleedlatif1
committed
88c0b15