Skip to content

fix: log rejected game server WebSocket connections#138

Open
Flegma wants to merge 2 commits intomainfrom
audit/371-gateway-logging
Open

fix: log rejected game server WebSocket connections#138
Flegma wants to merge 2 commits intomainfrom
audit/371-gateway-logging

Conversation

@Flegma
Copy link
Copy Markdown
Contributor

@Flegma Flegma commented Apr 2, 2026

Summary

Follow-up to #137 (merged). Adds warning logs when game server WebSocket connections are rejected for security monitoring:

  • Missing auth header (includes client IP)
  • Malformed auth credentials
  • Invalid credentials format

Test plan

  • Connect without auth header — warning logged
  • Connect with malformed Basic auth — warning logged

Flegma added 2 commits April 2, 2026 16:16
Add warning logs when connections are rejected due to missing auth
header, malformed credentials, or invalid format for security monitoring.
Per review: all three rejection paths should log the IP for
consistent security monitoring, not just the first one.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant