Skip to content

fix(gateway): include per-platform ALLOW_ALL and SIGNAL_GROUP in startup allowlist check#3313

Merged
teknium1 merged 1 commit intomainfrom
hermes/hermes-dfd0d467
Mar 27, 2026
Merged

fix(gateway): include per-platform ALLOW_ALL and SIGNAL_GROUP in startup allowlist check#3313
teknium1 merged 1 commit intomainfrom
hermes/hermes-dfd0d467

Conversation

@teknium1
Copy link
Copy Markdown
Contributor

Summary

Second piece from PR #3202 by @binhnt92.

The startup warning No user allowlists configured missed SIGNAL_GROUP_ALLOWED_USERS and per-platform *_ALLOW_ALL_USERS vars. The actual auth check already recognized them, causing a false warning.

4 new tests.

…tup allowlist check

The startup warning 'No user allowlists configured' only checked
GATEWAY_ALLOW_ALL_USERS and per-platform _ALLOWED_USERS vars. It
missed SIGNAL_GROUP_ALLOWED_USERS and per-platform _ALLOW_ALL_USERS
vars (e.g. TELEGRAM_ALLOW_ALL_USERS), causing a false warning even
when users had these configured. The actual auth check in
_is_user_authorized already recognized these vars.

Cherry-picked from PR #3202 by binhnt92.
@teknium1 teknium1 merged commit 005786c into main Mar 27, 2026
1 of 2 checks passed
StreamOfRon pushed a commit to StreamOfRon/hermes-agent that referenced this pull request Mar 29, 2026
…tup allowlist check (NousResearch#3313)

The startup warning 'No user allowlists configured' only checked
GATEWAY_ALLOW_ALL_USERS and per-platform _ALLOWED_USERS vars. It
missed SIGNAL_GROUP_ALLOWED_USERS and per-platform _ALLOW_ALL_USERS
vars (e.g. TELEGRAM_ALLOW_ALL_USERS), causing a false warning even
when users had these configured. The actual auth check in
_is_user_authorized already recognized these vars.

Cherry-picked from PR NousResearch#3202 by binhnt92.

Co-authored-by: binhnt92 <binhnt.ht.92@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants