RFC0055 Identity-Aware Routing#4910

Open

rkoster wants to merge 29 commits intomainfrom

feature/app-to-app-mtls-routing

Commits on Apr 21, 2026

Add allowed_sources support for mTLS app-to-app routing
rkoster
committed
Add unit tests for allowed_sources validation
rkoster
committed
Fix allowed_sources validation to handle symbol keys
rkoster
committed
Rename allowed_sources to mtls_allowed_sources for clarity
rkoster
committed
Refactor mTLS route options to RFC-0027 compliant flat format
rkoster
committed
Implement RFC domain-scoped mTLS routing with /v3/access_rules API
rkoster
committed
Fix access_rules_controller permissions query
rkoster
committed
Add automatic Diego sync callbacks to RouteAccessRule
rkoster
committed
Implement include=selector_resource for /v3/access_rules endpoint
rkoster
committed
Add space_guids filtering to /v3/access_rules endpoint
rkoster
committed
Implement include=route for /v3/access_rules endpoint
rkoster
committed
Remove name field from access rules, add read-only relationships per RFC updates
rkoster
committed
Add metadata support to RouteAccessRule model
rkoster
committed
Fix class loading for RouteAccessRule metadata models
rkoster
committed
Add validation to prevent access rules on internal domains per RFC
rkoster
committed
Consolidate access rules migrations, fix RuboCop offenses, and clean up tests
rkoster
committed
Fix race condition, double join, LIKE injection, N+1 queries, and domain API surface in access rules
rkoster
committed
Fix incomplete LIKE metacharacter escaping (CodeQL rb/incomplete-sanitization)
rkoster
committed
Add tests for LIKE metacharacter escaping (backslash, underscore)
rkoster
committed
Fix MySQL key length limit in metadata table migration
rkoster
committed
Fix routing_info_spec: remove nonexistent name field from RouteAccessRule
rkoster
committed
Fix route presenter regression: include options: {} when empty
rkoster
committed
Fix CI failures: route presenter options logic and domain V2 serialization
rkoster
committed
Rebrand: access rules → route policies, selector → source
rkoster
committed
Fix test failures: complete terminology rebrand in specs
rkoster
committed
Fix routing_info_spec: use enforce_route_policies field names
rkoster
committed
Fix domain_create_message_spec: use enforce_route_policies field names
rkoster
committed
Fix route_policies_spec: use 'Source' terminology and 'sources' query param
rkoster
committed
Revert: restore label_selector (was incorrectly renamed to label_source)
rkoster
committed