Skipper
|
9ca2c4ed64
|
refactor(server::db): introduced newtype wrappers for entity id's in database
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
ab79959dce
|
housekeeping(server): deps upgrade + diesel migration to AsyncFnOnce
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
853a038363
|
fix(server): MacOS build version
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
a31ef99338
|
housekeeping(server): removed unused deps
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
ec5a8143fb
|
refactor: rename to to better reflect meaning
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
602be3aa11
|
merge: feat-lints into main
|
2026-08-26 13:00:40 +02:00 |
|
CleverWild
|
1d15e04a6b
|
fix(lints): remove unstable ones
|
2026-08-26 13:00:40 +02:00 |
|
CleverWild
|
d4084ded35
|
feat: rustc and clippy linting
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
8392f27ce4
|
housekeeping(server): clippy warns fix
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
e6724cb8d3
|
merge: refactor-integrity-check into main
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
6b572d0c86
|
housekeeping(server): clean too-broad visibility markers and organize imports
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
d7ca0b4fc8
|
housekeeping(server): dependencies upgrade
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
bf63279f73
|
merge: refactor-integrity-check into main
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
539265e3b1
|
docs: updated to new auth challenge format and removed stale TOCTOU race condition note
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
cddf9e02ba
|
fix(useragent): now using new challenge format
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
270e843598
|
fix(server::tests): api surface of auth challenge changed
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
0a48839321
|
refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
f6151293d4
|
refactor(server): now keeps track of useragents, instead of
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
3bbf713e67
|
refactor(server::grpc::vault_gate): standard approach using / traits
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
810656702b
|
fix(server): sending fixed vault state when on stage
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
4823a291f8
|
WIP: kameo::messages wiring for transport generalization
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
1d9b572565
|
feat(user-agent): add VaultGate for sealed vault authentication
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
af7e90dcad
|
fix(server::integrity): vault now differentias between expected/unexpected states for commands more granularly
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
97e6b1950d
|
fix(useragent): unsafe, but working implementation of ml-dsa
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
d2f41e693c
|
fix(server::user_agent): useragents now self-sign themselves on bootstrap
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
9650407093
|
refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus
|
2026-08-26 13:00:40 +02:00 |
|
CleverWild
|
247cb90fbf
|
refactor(hashing): introduce Hashable derive macro and migrate server types
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
a49baf7386
|
housekeeping(server): fixed clippy warns
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
6b814f4869
|
refactor(server): moved shared module crypto into arbiter-crypto
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
4c2e00b56d
|
refactor(server): migrated auth to ml-dsa
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
13fb31f841
|
fix(server::bootsrapper): token compare is now constant-time
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
2df25b8641
|
tests(server::client::auth): integrity envelope insertion for valid paths
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
11ad5df426
|
feat(server): add integrity verification for client keys
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
bd0a8f3907
|
tests(server): property-based testing for ordering independency for hash
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
d482ed37aa
|
fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
dcf42b0e4e
|
fix(server): added chain_id check and covered check_shared_constraints with unit tests
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
38284d84b6
|
tests(server): initial cargo-mutants
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
498e2e3145
|
fix(server): simplify hash function for debug profile
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
9173be2920
|
tests(server): fixed for new integrity checks
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
d55e9880ec
|
refactor(server): rework envelopes and integrity check
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
ba7bfe9b6f
|
fix(server): remove stale mentions of miette
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
6a0c512773
|
chore: inline integrity proto types
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
4bd8a2df33
|
feat(server): integrity envelope engine for EVM grants with HMAC verification
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
37fa954933
|
merge: @main into client-integrity-verification
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
5c3421de1e
|
housekeeping(server): fixed clippy warns
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
be23f87e67
|
refactor(user-agent): remove backfill pubkey integrity tags
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
29f2174dcf
|
fix(server): previously, user agent auth accepted invalid signatures
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
149035ecf5
|
refactor(server): separate crypto by purpose and moved outside of actor into separate module
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
17ea8d8dc9
|
feat(auth): implement attestation status verification for public keys
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
e9e2888e95
|
fix(keyholder): comment drift
|
2026-08-26 13:00:39 +02:00 |
|