hdbg
0d424f3afc
refactor(server): migrated auth to ml-dsa
2026-04-07 14:55:31 +02:00
hdbg
b122aa464c
refactor(server): rework envelopes and integrity check
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-test Pipeline failed
2026-04-05 14:17:00 +02:00
CleverWild
4057c1fc12
feat(server): integrity envelope engine for EVM grants with HMAC verification
2026-04-05 10:44:21 +02:00
CleverWild
a02ef68a70
feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-test Pipeline failed
2026-03-30 00:17:04 +02:00
hdbg
4ebe7b6fc4
merge: new flow into main
2026-03-22 12:50:55 +01:00
hdbg
cd07ab7a78
refactor(server): renamed 'wallet_visibility' to 'wallet_access'
2026-03-21 13:06:25 +01:00
hdbg
cfa6e068eb
feat(client): add client metadata and wallet visibility support
2026-03-20 20:41:00 +01:00
CleverWild
77c3babec7
feat: compat migrations
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-lint Pipeline was successful
ci/woodpecker/pr/server-test Pipeline was successful
2026-03-17 19:44:58 +01:00
CleverWild
02980468db
feat(poc): add terrors PoC crate scaffold and error types
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-03-15 19:21:55 +01:00
d29bca853b
chore: squash migrations
2026-03-14 13:22:47 +01:00
6030f30901
feat(user-agent-auth): add RSA and ECDSA auth key types
...
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-audit Pipeline failed
ci/woodpecker/pr/server-test Pipeline failed
ci/woodpecker/pr/server-vet Pipeline failed
Extend user-agent authentication to support Ed25519, ECDSA (secp256k1), and RSA (PSS+SHA-256) with minimal protocol and storage changes. Add key_type to auth requests and useragent_client, update key parsing/signature verification paths, and keep backward compatibility by treating UNSPECIFIED as Ed25519.
2026-03-14 12:14:30 +01:00
hdbg
67fce6f06a
feat(server::evm): more criterion types
2026-03-11 14:08:33 +01:00
hdbg
191b126462
feat(server): initial EVM functionality impl
2026-03-11 14:08:33 +01:00
hdbg
9dca7aff27
feat(proto): add URL parsing and TLS certificate management
2026-03-11 14:07:06 +01:00
hdbg
46a3c1768c
feat(server::key_holder): unique index on (root_key_id, nonce) to avoid nonce reuse
2026-03-11 14:05:42 +01:00
hdbg
281fbcb31d
feat(server): UserAgent seal/unseal
2026-03-11 14:05:42 +01:00
hdbg
69dd8f57ca
tests(server): UserAgent bootstrap token auth flow test
2026-02-14 18:16:19 +01:00
hdbg
ffa60c90b1
feat(auth): simplify auth model and implement bootstrap flow
...
Remove key_identity indirection table, storing public keys and nonces
directly on client tables. Replace AuthResponse with AuthOk, add a
BootstrapActor to manage token lifecycle, and move user agent stream
handling into the actor module.
2026-02-14 12:03:14 +01:00
hdbg
bbbb4feaa0
feat(unseal): add unseal protocol and crypto infrastructure
2026-02-12 18:49:43 +01:00
hdbg
8dd0276185
feat(proto): add separate client/user-agent gRPC services
2026-02-11 13:31:39 +01:00
hdbg
284f997cbe
misc: initial layout
2026-02-09 15:31:38 +01:00
