MarketTakers/arbiter
6
0
Fork 0
Code Issues 14 Pull Requests 7 Packages Projects Releases Wiki Activity

security(server): bind grant revocation state (revoked_at) to integrity hash

Browse Source
This commit is contained in:
CleverWild
2026-04-08 12:09:54 +02:00
committed by Skipper
parent 96b4eb1d98
commit 943d0ee72f
5 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
server/crates/arbiter-server/src/evm/policies.rs
View File

@@ -146,6 +146,7 @@ pub struct SharedGrantSettings {
pub valid_from: Option<DateTime<Utc>>,
pub valid_until: Option<DateTime<Utc>>,
pub revoked_at: Option<DateTime<Utc>>,
pub max_gas_fee_per_gas: Option<U256>,
pub max_priority_fee_per_gas: Option<U256>,
@@ -160,6 +161,7 @@ impl SharedGrantSettings {
chain: model.chain_id as u64, // safe because chain_id is stored as i32 but is guaranteed to be a valid ChainId by the API when creating grants
valid_from: model.valid_from.map(Into::into),
valid_until: model.valid_until.map(Into::into),
revoked_at: model.revoked_at.map(Into::into),
max_gas_fee_per_gas: model
.max_gas_fee_per_gas
.map(|b| utils::try_bytes_to_u256(&b))