Skipper
790026e93b
fix(server::tests): api surface of auth challenge changed
2026-04-17 17:58:22 +02:00
Skipper
0e09afda5d
refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database
2026-04-17 17:44:42 +02:00
hdbg
f49e995c2f
WIP: kameo::messages wiring for transport generalization
ci/woodpecker/pr/server-test Pipeline failed
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-audit Pipeline failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/useragent-analyze Pipeline failed
2026-04-16 17:18:46 +02:00
hdbg
87ee0fe87b
feat(user-agent): add VaultGate for sealed vault authentication
2026-04-12 11:53:05 +02:00
hdbg
6b8da567dd
fix(server::user_agent): useragents now self-sign themselves on bootstrap
2026-04-08 17:40:45 +02:00
hdbg
1585f90cae
refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus
2026-04-08 12:34:16 +02:00
hdbg
a9f9fc2a9d
housekeeping(server): fixed clippy warns
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-test Pipeline was successful
2026-04-07 16:28:47 +02:00
hdbg
d22ab49e3d
refactor(server): moved shared module crypto into arbiter-crypto
2026-04-07 16:24:51 +02:00
hdbg
0d424f3afc
refactor(server): migrated auth to ml-dsa
2026-04-07 14:55:31 +02:00
hdbg
00745bb381
tests(server): fixed for new integrity checks
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-test Pipeline was successful
2026-04-05 14:49:02 +02:00
hdbg
b122aa464c
refactor(server): rework envelopes and integrity check
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-test Pipeline failed
2026-04-05 14:17:00 +02:00
hdbg
7aca281a81
merge: @main into client-integrity-verification
ci/woodpecker/push/server-vet Pipeline failed
ci/woodpecker/push/server-lint Pipeline failed
ci/woodpecker/pr/useragent-analyze Pipeline failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/push/useragent-analyze Pipeline failed
ci/woodpecker/push/server-test Pipeline failed
ci/woodpecker/pr/server-test Pipeline failed
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/push/server-audit Pipeline was successful
ci/woodpecker/pr/server-audit Pipeline was successful
2026-04-05 10:25:46 +02:00
hdbg
dd51d756da
refactor(server): separate crypto by purpose and moved outside of actor into separate module
2026-04-04 14:21:52 +02:00
CleverWild
8feda7990c
fix(auth): reject invalid challenge signatures instead of transitioning to AuthOk
2026-04-03 22:20:07 +02:00
CleverWild
a02ef68a70
feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-test Pipeline failed
2026-03-30 00:17:04 +02:00
hdbg
60ce1cc110
test(user-agent): add test helpers and update actor integration tests
2026-03-19 07:53:55 +00:00
hdbg
2ff4d0961c
refactor(server::client): migrated to new connection design
2026-03-19 07:53:55 +00:00
hdbg
d61dab3285
refactor(server::useragent): migrated to new connection design
2026-03-19 07:53:55 +00:00
hdbg
549a0f5f52
refactor(server): removed grpc adapter and replaced with concrete implementations
2026-03-16 03:12:29 +01:00
6030f30901
feat(user-agent-auth): add RSA and ECDSA auth key types
...
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-audit Pipeline failed
ci/woodpecker/pr/server-test Pipeline failed
ci/woodpecker/pr/server-vet Pipeline failed
Extend user-agent authentication to support Ed25519, ECDSA (secp256k1), and RSA (PSS+SHA-256) with minimal protocol and storage changes. Add key_type to auth requests and useragent_client, update key parsing/signature verification paths, and keep backward compatibility by treating UNSPECIFIED as Ed25519.
2026-03-14 12:14:30 +01:00
hdbg
cb05407bb6
feat(server): broker agent for inter-actor coordination
ci/woodpecker/push/server-vet Pipeline failed
ci/woodpecker/push/server-audit Pipeline was successful
ci/woodpecker/push/server-lint Pipeline failed
ci/woodpecker/push/server-test Pipeline was successful
2026-03-11 14:08:15 +01:00
hdbg
54d0fe0505
refactor(server::{user_agent, client}): move auth part to separate function to not to pollute actor session with one-time concerns
2026-03-11 14:08:15 +01:00
hdbg
4b4a8f4489
refactor: consolidate auth messages into client and user_agent packages
2026-03-11 14:08:15 +01:00
hdbg
b8afd94b21
refactor(transport): implemented Bi stream based abstraction for actor communication with next loop override
2026-03-11 14:07:46 +01:00
hdbg
9dca7aff27
feat(proto): add URL parsing and TLS certificate management
2026-03-11 14:07:06 +01:00
hdbg
d81120f59c
refactor(server::tests): moved integration-like tests into tests/
2026-03-11 14:05:42 +01:00