Pulse/internal/websocket
rcourtman c4ca169e2b feat: add multi-tenant isolation foundation (disabled by default)
Implements multi-tenant infrastructure for organization-based data isolation.
Feature is gated behind PULSE_MULTI_TENANT_ENABLED env var and requires
Enterprise license - no impact on existing users.

Core components:
- TenantMiddleware: extracts org ID, validates access, 501/402 responses
- AuthorizationChecker: token/user access validation for organizations
- MultiTenantChecker: WebSocket upgrade gating with license check
- Per-tenant audit logging via LogAuditEventForTenant
- Organization model with membership support

Gating behavior:
- Feature flag disabled: 501 Not Implemented for non-default orgs
- Flag enabled, no license: 402 Payment Required
- Default org always works regardless of flag/license

Documentation added: docs/MULTI_TENANT.md
2026-01-23 21:42:27 +00:00
..
concurrency_test.go Fix settings security tab navigation 2025-10-11 23:29:47 +00:00
hub.go chore: reliability and maintenance improvements 2026-01-22 00:45:04 +00:00
hub_concurrency_test.go refactor: use strconv.Itoa instead of string(rune()) in test 2025-10-20 15:12:14 +00:00
hub_more2_test.go test: Add comprehensive test coverage across packages 2026-01-19 19:26:18 +00:00
hub_more_test.go test: Add comprehensive test coverage across packages 2026-01-19 19:26:18 +00:00
hub_multitenant_test.go feat: add multi-tenant isolation foundation (disabled by default) 2026-01-23 21:42:27 +00:00
hub_test.go Add unit tests for websocket Hub.checkOrigin function 2025-12-01 09:33:40 +00:00