Add API key authentication for production A2A endpoints#2
Merged
rockfordlhotka merged 5 commits intomainfrom Mar 19, 2026
Merged
Add API key authentication for production A2A endpoints#2rockfordlhotka merged 5 commits intomainfrom
rockfordlhotka merged 5 commits intomainfrom
Conversation
Adds a custom ASP.NET Core authentication handler that validates API keys via X-Api-Key header or Authorization: ApiKey <token>, avoiding Azure Entra ID dependency for self-hosted k8s deployments. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Fix global.json SDK version constraint for container compatibility - Add .dockerignore to reduce build context - Update deployment image to rockylhotka/socialagent:latest - Set correct Mastodon instance URL and Bluesky handle in configmap Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Replace default logging with Serilog (console sink, config-driven) - Add OpenTelemetry traces and metrics with OTLP exporter - Instrument ASP.NET Core, HttpClient, and Npgsql - Serilog OTel sink available for log export when collector is configured Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…status - Add Gemini Flash skill router via OpenRouter for natural language A2A intent classification, with keyword matching as fallback - Fix HttpClient DI collision where both providers registered against ISocialMediaProvider, causing Mastodon to use Bluesky's base URL - Sync read status from platforms: Bluesky maps IsRead directly, Mastodon uses markers API to compare against last_read_id - Repository now updates IsRead on existing notifications during upsert Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Move all manifests from social-agent to rockbot namespace - Add LLM__Low env vars from rockbot-secrets for skill routing - Add OTEL exporter endpoint pointing to alloy collector Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
X-Api-Keyheader orAuthorization: ApiKey <token>global.jsonSDK version constraint and add.dockerignorefor container buildsTest plan
X-Api-Keyheader🤖 Generated with Claude Code