fix(connectors): warn when the runtime API is exposed without a key - #3804

Open

mlevkov wants to merge 6 commits into

apache:masterfrom

mlevkov:runtime-api-credential-hardening

Commits on Aug 9, 2026

fix(connectors): warn when the runtime API is exposed without a key
mlevkov
committed
320e92a
docs(connectors): document the runtime control API as privileged
mlevkov
committed
5ed1a33
test(connectors): cover the warning wiring in the API init
mlevkov
committed
4b7bf9a
fix(connectors): harden the API exposure warning after review
mlevkov
committed
b4ad655
docs(connectors): correct the config-rewrite chain in the API notice
mlevkov
committed
b86b567
fix(connectors): warn on every documented exposure path, not just one
mlevkov
committed
b84590a