Michael A. Kuykendall e56b457d5f security: remove SHIMMY_VISION_DEV_MODE license bypass ...

BREAKING CHANGE: Removed development mode bypass that allowed skipping license validation.

Security fixes:
- Remove SHIMMY_VISION_DEV_MODE env var bypass from vision_license.rs
- Remove dev mode conditionals from vision.rs license/usage checks
- Update api.rs to expose 4xx errors (client needs feedback) but hide 5xx (security)
- Update all test files to use cached licenses instead of dev mode bypass

This bypass allowed anyone reading the source code to skip all Keygen license
checks by setting an environment variable, completely circumventing the paid
licensing system.

Test coverage:
- 125+ vision tests passing
- New vision_keygen_live_tests.rs for real Keygen API testing
- Updated vision_api_integration.rs, vision_license_flow_tests.rs
- All tests now use proper cached/real license keys

2025-12-14 11:09:45 -06:00

5.8 KiB

Raw Permalink History

View Raw