Lucas Passos b539dfd9c3 fix(resilience): enforce premium gating for resilience RPCs (#2661) ...

* fix(resilience): gate premium RPCs through the current gateway path

Root cause: resilience RPCs added only to PREMIUM_RPC_PATHS would still be reachable from trusted browser origins because the gateway only forced API-key enforcement for tier-gated endpoints.\n\nAdd the resilience score/ranking routes to the shared premium path set, force legacy premium paths through the API-key-or-bearer gate, and extend gateway tests to cover both resilience endpoints for API-key and bearer flows.

* test(resilience): cover free-plan and invalid bearer on resilience endpoints

---------

Co-authored-by: Elie Habib <elie.habib@gmail.com>

2026-04-04 11:48:12 +04:00

11 KiB

Raw Permalink Blame History

View Raw