Commit Graph
4 Commits
Author SHA1 Message Date
mohmdsdgandCursor 94d79c175b fix(plugins): match remote HMAC tenants with the same host rules as get_user
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-08 10:50:40 +03:30
mohmdsdgandCursor 2d43ce6c29 Prefer exact tenant domain over shared nodeServer for remote HMAC auth.
Stops demo and shop rows that share one API URL from colliding, and skips phone-like adminUrl values when resolving X-Abshode-Domain.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-07 22:47:42 +03:30
mohmdsdgandCursor dd212d01ed fix(plugins): resolve remote tenant from admin and app URLs
HMAC only matched tenant.domain, so k.montzar.ir / new.gholaktala.ir missed the row. Also return an empty store when catalog tables are missing.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-07 21:54:03 +03:30
MahdiandCursor 57654e295c Add shared HMAC+domain auth for remote SMS wallet API.
Products can authenticate with one shared secret and tenant domain instead of per-version tokens; Bearer token remains as fallback.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-05 17:11:55 +03:30