refactor: Implement multi-tenant browser session isolation#41
Merged
refactor: Implement multi-tenant browser session isolation#41
Conversation
- Refactor session management from shared default to task-scoped isolation - Add GetOrCreateTaskSession() method for secure session creation - Implement automatic session expiration (10min) and cleanup (2min intervals) - Update all skills to use isolated sessions instead of shared default - Add comprehensive multi-tenant isolation tests - Add background session cleanup worker to prevent resource leaks - Document security benefits and performance impact Security improvements: - Complete tenant isolation (cookies, auth, storage, cache) - Prevents session hijacking across tenant boundaries - GDPR compliant for multi-tenant deployments - Automatic resource cleanup prevents memory leaks Performance impact: ~1-2s overhead per task for session creation Trade-off: Security vs speed (appropriate for multi-tenant safety) Fixes #40 🤖 Generated with [Claude Code](https://claude.ai/code) Co-authored-by: Eden Reich <edenreich@users.noreply.github.com>
…kills Signed-off-by: Eden Reich <eden.reich@gmail.com>
Signed-off-by: Eden Reich <eden.reich@gmail.com>
Signed-off-by: Eden Reich <eden.reich@gmail.com>
… methods to FakeBrowserAutomation Signed-off-by: Eden Reich <eden.reich@gmail.com>
…ID retrieval and session reuse Signed-off-by: Eden Reich <eden.reich@gmail.com>
…ate session management across skills Signed-off-by: Eden Reich <eden.reich@gmail.com>
|
🎉 This PR is included in version 0.4.2 🎉 The release is available on:
Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Refactors browser session management to provide complete multi-tenant isolation, resolving security risks from shared browser sessions.
Changes
GetOrCreateTaskSession()for isolationSecurity Benefits
Performance Impact
Fixes #40
Generated with Claude Code
Co-authored-by: Eden Reich edenreich@users.noreply.github.com