jgrusewski 576ad25d25 safety(web-gateway,web-dashboard): WS topic validation, audit logging, API timeouts ...

- Add VALID_TOPICS whitelist to WS handler, reject unknown topic subscriptions
- Add per-connection rate limit (50 topic changes/min) and max 20 subscriptions
- Remove wildcard "*" subscription (security risk)
- Add tracing::info! audit logging to all 8 mutation handlers
- Add 30s AbortController timeout to frontend API calls
- Fix clippy: rename _claims → claims in handlers that now use it

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-22 09:45:01 +01:00

..

handler.rs

safety(web-gateway,web-dashboard): WS topic validation, audit logging, API timeouts

2026-02-22 09:45:01 +01:00

messages.rs

safety(web-gateway,web-dashboard): clippy clean, gRPC timeouts, health probes, responsive grids, error boundaries

2026-02-22 08:59:20 +01:00

mod.rs

feat(web-gateway): WebSocket infrastructure with topic-based subscriptions

2026-02-22 00:18:43 +01:00