fix: harden security resource lifecycles

2026-07-29 12:37:02 +01:00
parent f0a1a0b8f2
commit b5c7528160
17 changed files with 460 additions and 76 deletions
@@ -184,8 +184,11 @@ func newBridgeApp() (*bridgeApp, error) {
 }

 func (a *bridgeApp) close() {
+	if a.service != nil {
+		a.service.Shutdown()
+	}
 	if a.manager != nil {
-		a.manager.CloseAll()
+		a.manager.Shutdown()
 	}
 	if a.store != nil {
 		_ = a.store.Close()
@@ -243,7 +246,7 @@ func (a *bridgeApp) handleRuntimeEvent(w http.ResponseWriter, r *http.Request) {
 		value, _ := req.Payload["value"].(string)
 		cancelled, _ := req.Payload["cancelled"].(bool)
 		a.service.RespondSecret(requestID, value, cancelled)
-		a.manager.RespondSecret(requestID, value)
+		a.manager.RespondSecret(requestID, value, cancelled)
 	case "session:hostkey:response":
 		requestID, _ := req.Payload["requestID"].(string)
 		accepted, _ := req.Payload["accepted"].(bool)