fix(media): require authenticated reads - #4610

Merged

shellz-n-stuff merged 7 commits into

mainfrom

codex/security-media-read-auth

Aug 7, 2026

Commits on Aug 7, 2026

Require authentication for media reads by default

jmecom
authored and
shellz-n-stuff
committed
08da3a8
Require authentication for all media reads

jmecom
authored and
shellz-n-stuff
committed
321ae35
feat(relay): warn when inert media read-auth env vars are set

authored and
shellz-n-stuff
committed
1f53c9e
test(media): authenticate blob reads in the media acceptance lane

authored and
shellz-n-stuff
committed
d259dc8
ci: run the media read-auth e2e lane

authored and
shellz-n-stuff
committed
f0c4905
test(media): strip pHYs from the PNG fixture and stop hiding lane failures

authored and
shellz-n-stuff
committed
82ba5eb
chore: retrigger GitHub Actions
shellz-n-stuff
committed
65ac576