Add webhook endpoint authentication bypass and admin context unfiltered data access (#12956)

Co-authored-by: openhands <openhands@all-hands.dev>
This commit is contained in:
Tim O'Farrell
2026-02-23 09:28:49 +00:00
committed by GitHub
parent 872f2b87f2
commit ddb809bc43
6 changed files with 617 additions and 3 deletions

View File

@@ -62,7 +62,7 @@ async def valid_sandbox(
),
sandbox_service: SandboxService = sandbox_service_dependency,
) -> SandboxInfo:
if session_api_key is None:
if not session_api_key:
raise HTTPException(
status.HTTP_401_UNAUTHORIZED, detail='X-Session-API-Key header is required'
)
@@ -144,7 +144,6 @@ async def on_event(
event_service: EventService = event_service_dependency,
) -> Success:
"""Webhook callback for when event stream events occur."""
app_conversation_info = await valid_conversation(
conversation_id, sandbox_info, app_conversation_info_service
)