Files
zooqueenandHanzo Dev ee04134d98 fix(auth): catch IAM SDK throw on non-JWT gateway token
The @hanzo/iam SDK's validateToken throws when given a malformed token
(hex gateway token instead of JWT).  This bypassed the shared-secret
fallback in authorizeGatewayConnect, causing marketplace requests with
BOT_GATEWAY_TOKEN to return 500 instead of proceeding through the
token-auth path.

Wrap validateIamToken in try/catch so malformed tokens fall through to
the gateway token comparison.  Also log unhandled HTTP errors in
server-http.ts instead of silently returning 500.

Co-authored-by: Hanzo Dev <[email protected]>
2026-02-27 02:18:39 -08:00
..
…
…
…