feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill

This commit is contained in:
CleverWild
2026-03-30 00:17:04 +02:00
committed by Skipper
parent 2b7d3257da
commit e2e2c4fc07
11 changed files with 434 additions and 13 deletions

View File

@@ -47,6 +47,7 @@ create table if not exists useragent_client (
id integer not null primary key,
nonce integer not null default(1), -- used for auth challenge
public_key blob not null,
pubkey_integrity_tag blob,
key_type integer not null default(1), -- 1=Ed25519, 2=ECDSA(secp256k1)
created_at integer not null default(unixepoch ('now')),
updated_at integer not null default(unixepoch ('now'))