Skip to content

feat: authenticate calls to transaction api#570

Merged
klejeune merged 3 commits intomainfrom
feat/authentication
Mar 9, 2026
Merged

feat: authenticate calls to transaction api#570
klejeune merged 3 commits intomainfrom
feat/authentication

Conversation

@klejeune
Copy link
Contributor

@klejeune klejeune commented Mar 6, 2026


Note

Medium Risk
Adds optional Authorization headers to all Smart Transactions network calls when a token provider is configured, which can affect request authentication and backend behavior if misconfigured. Risk is limited to the STX fetch wrapper and is covered by new header-matching tests.

Overview
Adds optional request authentication for Smart Transactions. SmartTransactionsController now accepts an optional getBearerToken callback and, when provided, attaches Authorization: Bearer <token> to requests targeting the Transaction API (API_BASE_URL) and Sentinel endpoints (SENTINEL_API_BASE_URL_MAP).

Tests are extended to assert the Authorization header is sent for both cancelSmartTransaction and fetchLiveness when getBearerToken is configured.

Written by Cursor Bugbot for commit 0bd2986. This will update automatically on new commits. Configure here.

@klejeune klejeune requested a review from a team as a code owner March 6, 2026 10:33
@klejeune klejeune merged commit 0c5dbd4 into main Mar 9, 2026
16 checks passed
@klejeune klejeune deleted the feat/authentication branch March 9, 2026 14:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants