INNER CODE UNIT · Rust

invalid_container_ids

ovexro/dockpanel · panel/agent/src/routes/mod.rs:156

    fn invalid_container_ids() {
        assert!(!is_valid_container_id(""));
        assert!(!is_valid_container_id("not-hex!"));
        assert!(!is_valid_container_id(&"a".repeat(65)));
    }
}

/// Auth middleware — validates Bearer token on all routes except /health.
/// Uses constant-time comparison to prevent timing attacks.
/// Supports a grace period for the previous token during rotation.
pub async fn auth_middleware(
    axum::extract::State(state): axum::extract::State<AppState>,
    request: Request,
    next: Next,
) -> Result<Response, StatusCode> {
    // Skip auth for health endpoint
    if request.uri().path() == "/health" {
        return Ok(next.run(request).await);

View source record →