Cairn

Feishu approval card auth and identity fixes

NousResearch/hermes-agent · cluster 26183 · gateway

Data as of

16 open items. Fix attempted, not merged.

The short answer

8open issues
8open PRs
22items grouped
Known?
Yes. 22 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 6 PRs closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
8 issues and 8 PRs.

Multiple bugs and fixes around Feishu/Lark approval card button authorization, covering open_id vs user_id identity mismatches, wildcard FEISHU_ALLOWED_USERS not being honored in DMs, and incorrect auth check methods being used for interactive card actions.

Open issues8

  • Issue#26183[Bug]: Feishu DM authorization fails — `hermes gateway setup` writes open_id but runtime uses user_id for FEISHU_ALLOWED_USERS check
  • Issue#35032fix(feishu): approval buttons broken after v0.15.0 upgrade when no admins configured
  • Issue#35207[Regression] Feishu Approval Cards broken in v0.15
  • Issue#37252Feishu/Lark: approval card-button clicks rejected for allow-listed users (open_id vs user_id mismatch)
  • Issue#40225fix(feishu): card approval buttons use _allow_group_message instead of _is_interactive_operator_authorized, rejecting all users in DM
  • Issue#51583Feishu: Approval card clicks rejected when `FEISHU_ALLOW_ALL_USERS=true` but `FEISHU_GROUP_POLICY` not set
  • Issue#51684[Feishu] FEISHU_ALLOWED_USERS=* wildcard does not apply to approval card clicks
  • Issue#57202[Bug]: FEISHU_ALLOWED_USERS=* wildcard broken for DM messages — dm_policy_rejected

Open PRs8

  • PR#21396fix(feishu): prefer open_id over user_id in sender identity
  • PR#26225fix: align Feishu DM allowlist auth with setup open_id
  • PR#35042fix(feishu): use consistent auth check for approval card actions
  • PR#37417fix(feishu): authorize approval clicks via cached aliases
  • PR#40271fix(feishu): card approval buttons use _is_interactive_operator_authorized (#40225)
  • PR#51778fix(feishu): honor FEISHU_ALLOWED_USERS=* wildcard for approval card clicks
  • PR#57215fix(feishu): honor DM allowlist wildcard
  • PR#57253fix(feishu): honor wildcard allowed users

6 PRs closed without merging

From the close comments: duplicate 2 · superseded by another PR 2 · closed without comment 1 · other 1

  • #26197 fix(feishu): prefer open_id over user_id in _resolve_sender_profile · duplicate → #21396
  • #29477 fix(feishu): allowlist auth checks open_id alongside user_id · duplicate → #26225, #26183, #26197, #21396
  • #40330 fix(feishu): approval buttons use _is_interactive_operator_authorized (#40225) · other
  • #40756 fix(gateway): use correct auth check for approval card actions in DM · superseded by another PR
  • #43218 fix(feishu): use open_id as primary identity instead of user_id to prevent auth mismatch · closed without comment
Show 1 more
  • #57227 fix(feishu): wildcard FEISHU_ALLOWED_USERS for DM admission · superseded by another PR → #57215
How this cluster was grouped
  • Link evidence (partly structural links): some members are connected by structural evidence (shared changed files, or a closing/superseded reference); the rest are joined by an automated relevance judgement over their text.
  • Members outside that structural core may belong to a different underlying problem.
  • Pairwise link density 0.08: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
gateway
Closed issues
0
Attempts
6 PRs closed without merging

For your agent

The same facts, typed.

cluster/26183.json
cluster/26183.md