azcomputerguru/guru-connect
1
0
Fork 0
Code Issues 13 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

docs(review): three-way (Claude+Gemini+Grok) codebase review + remediation plan
Some checks failed
Build and Test / Security Audit (push) Successful in 9m2s
Details
Build and Test / Build Server (Linux) (push) Failing after 16m9s
Details
Build and Test / Build Agent (Windows) (push) Successful in 19m25s
Details
Build and Test / Build Summary (push) Has been skipped
Details

Browse Source 
Independent reviews of server/agent/dashboard by Gemini 3.1 Pro and
Grok 4.3, each reading source via its own read_file tool, plus a Claude
synthesis and a phased remediation plan. Top convergent finding:
secrets/tokens in WebSocket URL query strings across agent + dashboard.
See SYNTHESIS-three-way.md and REMEDIATION-PLAN.md.
This commit is contained in:
Mike Swanson
2026-06-05 17:20:30 -07:00
parent 72835fa1b5
commit ded99c5882
23 changed files with 828 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
reports/review-2026-06-05/files-server-a.txt Normal file
View File

@@ -0,0 +1,21 @@
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/auth.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/auth_logout.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/changelog.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/downloads.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/enroll.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/machine_keys.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/mod.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/releases.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/removal.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/sessions.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/sites.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/api/users.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/auth/agent_keys.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/auth/enrollment_keys.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/auth/jwt.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/auth/mod.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/auth/password.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/auth/token_blacklist.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/auth/viewer_token_registry.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/config.rs
/d/claudetools/projects/msp-tools/guru-connect/server/src/db/agent_keys.rs