archetech / archon / 31271267486

95%

push

github

fix(drawbridge): keep unverified subscription-auth stub out of the default L402 chain (#866)

* fix(drawbridge): keep unverified subscription-auth stub out of the default L402 chain

The subscription-auth middleware scaffolded in #121 marks any request
carrying an X-Subscription-DID header as subscription-authenticated
without verifying a credential, and the L402 middleware skips all
payment verification for such requests. Because createAuthMiddleware
unconditionally prepended the stub, every deployment with
ARCHON_DRAWBRIDGE_L402_ENABLED=true could be stripped of payment
enforcement by a single self-asserted header.

createAuthMiddleware now builds an L402-only chain unless the caller
explicitly passes subscriptionAuthEnabled, wired to a new
ARCHON_DRAWBRIDGE_SUBSCRIPTIONS_ENABLED env var that defaults to false.
Drawbridge logs a loud warning when the stub is enabled alongside L402,
and sample.env documents the stub as an insecure dev toggle pending
real credential verification in #121.

* fix(drawbridge): wire the subscriptions toggle into compose, correct auth docs

The new ARCHON_DRAWBRIDGE_SUBSCRIPTIONS_ENABLED var was missing from the
drawbridge service's environment list, which enumerates vars explicitly
rather than inheriting the host env — so setting it in .env had no effect
under the standard Docker deployment. Defaults to false, matching config.ts.

The auth section still described unconditional dual auth and claimed the
subscription stub resolves a DID to an issued subscription credential,
which it never did. Rewrite it to state that L402 alone guards protected
routes by default, and add a section describing what the stub actually
does when the flag is on. Renumber Bypass routes to 3.2 and add the var
to both env tables.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

---------

Co-authored-by: David McFadzean <davidmc@gmail.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

3610 of 4065 branches covered (88.81%)

Branch coverage included in aggregate %.

5 of 5 new or added lines in 1 file covered. (100.0%)

8234 of 8516 relevant lines covered (96.69%)

686.81 hits per line