Go to file

yumoqing 57afe1264c feat(security): implement IP filtering and API key authentication

- Added validate_ip_and_apikey() decorator for endpoint protection
- Implemented IP address validation with configurable allowed_ips list
- Added API key authentication with header-based or bearer token support
- Fixed endpoint function signatures to properly receive Request objects
- Updated configuration structure and security documentation
- Removed debug print statements before final commit

2026-04-22 21:41:45 +08:00

hermes-service

feat: Initial implementation of hermes-service with multi-user support

2026-04-21 13:20:10 +08:00

init

feat: Initial implementation of hermes-service with multi-user support

2026-04-21 13:20:10 +08:00

json

feat: Initial implementation of hermes-service with multi-user support

2026-04-21 13:20:10 +08:00

models

feat: Initial implementation of hermes-service with multi-user support

2026-04-21 13:20:10 +08:00

wwwroot

feat: Initial implementation of hermes-service with multi-user support

2026-04-21 13:20:10 +08:00

build.sh

feat: Initial implementation of hermes-service with multi-user support

2026-04-21 13:20:10 +08:00

config.yaml

feat(security): implement IP filtering and API key authentication

2026-04-22 21:41:45 +08:00

main.py

feat(security): implement IP filtering and API key authentication

2026-04-22 21:41:45 +08:00

nginx.conf.example

Add Nginx deployment support with IP and API key security features

2026-04-22 18:40:51 +08:00

pyproject.toml

Add Nginx deployment support with IP and API key security features

2026-04-22 18:40:51 +08:00

README.md

feat: Initial implementation of hermes-service with multi-user support

2026-04-21 13:20:10 +08:00

SECURITY.md

Add Bearer token authentication support for Authorization header

2026-04-22 18:43:32 +08:00

README.md

Hermes Service Web Application

Overview

Hermes Service is a web application that provides API access to Hermes Agent functionality. It runs in the Hermes Agent environment and exposes CLI capabilities through REST/WebSocket APIs.

Features

Execute Hermes CLI commands via API
Manage multiple Hermes service instances
User and organization-based access control (using rbac module)
Real-time communication via WebSocket
Configuration management

Integration

This module integrates with:

rbac: For user and permission management
appbase: For system parameter management
Hermes Agent: Core functionality execution

Directory Structure

hermes-service/: Python package with core logic
wwwroot/: Frontend components (bricks-framework .ui files)
models/: Database table definitions
json/: CRUD operation definitions
init/: Initialization data