Skip to content

fix(sdk): drop auth headers from public firewall API endpoint#581

Merged
John-David Dalton (jdalton) merged 1 commit intomainfrom
fix/firewall-no-auth
Apr 15, 2026
Merged

fix(sdk): drop auth headers from public firewall API endpoint#581
John-David Dalton (jdalton) merged 1 commit intomainfrom
fix/firewall-no-auth

Conversation

@jdalton
Copy link
Copy Markdown
Contributor

@jdalton John-David Dalton (jdalton) commented Apr 14, 2026

Summary

  • The per-PURL firewall endpoint (firewall-api.socket.dev/purl/) is public and doesn't require authentication
  • Strip Authorization header from #checkMalwareFirewall requests while keeping User-Agent, agent, signal, and timeout

Test plan

  • Existing checkMalware tests pass
  • Verify firewall API still returns results without auth

billxinli
Bill Li (billxinli) reviewed Apr 14, 2026
View reviewed changes
Comment thread src/socket-sdk-class.ts Outdated
@jdalton John-David Dalton (jdalton) force-pushed the fix/firewall-no-auth branch 4 times, most recently from b59c54d to 7a261e8 Compare April 15, 2026 00:02
@jdalton John-David Dalton (jdalton) merged commit f0baad0 into main Apr 15, 2026
10 checks passed
@jdalton John-David Dalton (jdalton) deleted the fix/firewall-no-auth branch April 15, 2026 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@billxinli Bill Li (billxinli) billxinli approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@jdalton @billxinli