bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

feat(enterprise): add device-bound responsibility gate

Browse source
This commit is contained in:
冰朔 2026-09-03 21:48:04 +08:00
commit be31c4136b
7 changed files with 392 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

32
product-source/hololake-clean-desktop/server/enterprise-responsibility-gate/nginx.conf Normal file
View file

@ -0,0 +1,32 @@
location = /api/hololake/enterprise/device-gate/health {
limit_except GET { deny all; }
proxy_pass http://127.0.0.1:8033/health;
proxy_set_header Host $host;
add_header Cache-Control "no-store" always;
}
location = /api/hololake/enterprise/device-gate/enroll {
limit_except POST { deny all; }
proxy_pass http://127.0.0.1:8033/v1/device/enroll;
proxy_set_header Host $host;
proxy_set_header Authorization $http_authorization;
client_max_body_size 16k;
}
location = /api/hololake/enterprise/device-gate/challenges {
limit_except POST { deny all; }
proxy_pass http://127.0.0.1:8033/v1/challenges;
proxy_set_header Host $host;
client_max_body_size 16k;
}
location = /api/hololake/enterprise/device-gate/challenges/verify {
limit_except POST { deny all; }
proxy_pass http://127.0.0.1:8033/v1/challenges/verify;
proxy_set_header Host $host;
client_max_body_size 16k;
}
location = /api/hololake/enterprise/device-gate/session {
limit_except GET { deny all; }
proxy_pass http://127.0.0.1:8033/v1/session;
proxy_set_header Host $host;
proxy_set_header Authorization $http_authorization;
add_header Cache-Control "no-store" always;
}