CleverWild
|
84e1ef7c85
|
security(memory): zeroization of bootstrap token
|
2026-08-26 13:01:44 +02:00 |
|
|
|
3ff0875c48
|
Merge pull request 'security(server): bind grant revocation state (revoked_at) to integrity hash' (#83) from security-hash-revoke_at into main
Reviewed-on: #83
|
2026-08-26 13:01:44 +02:00 |
|
CleverWild
|
7de235f144
|
fix(smlang::statemachine): macro invocation requires inner types to be public
|
2026-08-26 13:01:44 +02:00 |
|
CleverWild
|
2b8acad415
|
fix: lints
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
ab79959dce
|
housekeeping(server): deps upgrade + diesel migration to AsyncFnOnce
|
2026-08-26 13:01:44 +02:00 |
|
CleverWild
|
49e5f2c7f6
|
Merge branch 'main' into security-hash-revoke_at
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
853a038363
|
fix(server): MacOS build version
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
a31ef99338
|
housekeeping(server): removed unused deps
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
ec5a8143fb
|
refactor: rename to to better reflect meaning
|
2026-08-26 13:01:44 +02:00 |
|
CleverWild
|
7e23b3b2ec
|
security(evm): remove client-controlled wallet_access_id from grant revocation
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
e4db36f145
|
docs: move to folder and update to new challenge payload
|
2026-08-26 13:00:40 +02:00 |
|
CleverWild
|
bb28d311a1
|
feat(evm): add wallet_access_id to grant deletion requests and revocation logic
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
602be3aa11
|
merge: feat-lints into main
|
2026-08-26 13:00:40 +02:00 |
|
CleverWild
|
3302bb8995
|
refactor(evm): implement revoke_grant method for grant revocation
|
2026-08-26 13:00:40 +02:00 |
|
CleverWild
|
1d15e04a6b
|
fix(lints): remove unstable ones
|
2026-08-26 13:00:40 +02:00 |
|
|
|
d8a03fcdbe
|
Merge pull request 'refactor-integrity-check' (#90) from refactor-integrity-check into main
Reviewed-on: #90
|
2026-08-26 13:00:40 +02:00 |
|
CleverWild
|
772936937b
|
Merge branch 'security-hash-revoke_at' of ssh://git.markettakers.org:22222/MarketTakers/arbiter into security-hash-revoke_at
|
2026-08-26 13:00:40 +02:00 |
|
CleverWild
|
d4084ded35
|
feat: rustc and clippy linting
|
2026-08-26 13:00:40 +02:00 |
|
|
|
6221debd84
|
Merge pull request 'housekeeping(server): dependencies upgrade' (#89) from push-zmvtzuwrnyyv into main
Reviewed-on: #89
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
8392f27ce4
|
housekeeping(server): clippy warns fix
|
2026-08-26 13:00:40 +02:00 |
|
CleverWild
|
7a64bcd1bf
|
revert(server): bind grant revocation state (revoked_at) to integrity hash
|
2026-08-26 13:00:40 +02:00 |
|
CleverWild
|
943d0ee72f
|
security(server): bind grant revocation state (revoked_at) to integrity hash
|
2026-08-26 13:00:40 +02:00 |
|
|
|
96b4eb1d98
|
Merge pull request 'refactor(hashing): introduce Hashable derive macro and migrate server types' (#82) from hashing-proc-macro into main
Reviewed-on: #82
Reviewed-by: Stas <business@jexter.tech>
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
d7ca0b4fc8
|
housekeeping(server): dependencies upgrade
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
e6724cb8d3
|
merge: refactor-integrity-check into main
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
6b572d0c86
|
housekeeping(server): clean too-broad visibility markers and organize imports
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
bf63279f73
|
merge: refactor-integrity-check into main
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
539265e3b1
|
docs: updated to new auth challenge format and removed stale TOCTOU race condition note
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
cddf9e02ba
|
fix(useragent): now using new challenge format
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
270e843598
|
fix(server::tests): api surface of auth challenge changed
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
0a48839321
|
refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
f6151293d4
|
refactor(server): now keeps track of useragents, instead of
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
3bbf713e67
|
refactor(server::grpc::vault_gate): standard approach using / traits
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
810656702b
|
fix(server): sending fixed vault state when on stage
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
4823a291f8
|
WIP: kameo::messages wiring for transport generalization
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
1d9b572565
|
feat(user-agent): add VaultGate for sealed vault authentication
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
af7e90dcad
|
fix(server::integrity): vault now differentias between expected/unexpected states for commands more granularly
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
97e6b1950d
|
fix(useragent): unsafe, but working implementation of ml-dsa
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
d2f41e693c
|
fix(server::user_agent): useragents now self-sign themselves on bootstrap
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
9650407093
|
refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus
|
2026-08-26 13:00:40 +02:00 |
|
|
|
100c257e95
|
Merge pull request 'Post-quantum crypto and better useragent security' (#80) from push-xrxykvkuxpsv into main
Reviewed-on: #80
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
247cb90fbf
|
refactor(hashing): introduce Hashable derive macro and migrate server types
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
13fb31f841
|
fix(server::bootsrapper): token compare is now constant-time
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
a49baf7386
|
housekeeping(server): fixed clippy warns
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
2df25b8641
|
tests(server::client::auth): integrity envelope insertion for valid paths
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
6b814f4869
|
refactor(server): moved shared module crypto into arbiter-crypto
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
11ad5df426
|
feat(server): add integrity verification for client keys
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
97b7b483ff
|
docs: ml-dsa scheme everywhere
|
2026-08-26 13:00:39 +02:00 |
|
|
|
307822187c
|
Merge pull request 'fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing' (#77) from push-opwuyuwxknyo into main
Reviewed-on: #77
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
4c2e00b56d
|
refactor(server): migrated auth to ml-dsa
|
2026-08-26 13:00:39 +02:00 |
|
