hdbg
b122aa464c
refactor(server): rework envelopes and integrity check
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-test Pipeline failed
2026-04-05 14:17:00 +02:00
CleverWild
4057c1fc12
feat(server): integrity envelope engine for EVM grants with HMAC verification
2026-04-05 10:44:21 +02:00
CleverWild
a02ef68a70
feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-test Pipeline failed
2026-03-30 00:17:04 +02:00
hdbg
fb1c0ec130
refactor(proto): restructure wallet access messages for improved data organization
2026-03-29 00:37:58 +01:00
hdbg
bbf8a8019c
feat(evm): add wallet access grant/revoke functionality
ci/woodpecker/push/server-audit Pipeline was successful
ci/woodpecker/push/server-lint Pipeline failed
ci/woodpecker/push/server-vet Pipeline failed
ci/woodpecker/push/server-test Pipeline was successful
ci/woodpecker/push/useragent-analyze Pipeline failed
2026-03-25 16:33:55 +01:00
hdbg
cd07ab7a78
refactor(server): renamed 'wallet_visibility' to 'wallet_access'
2026-03-21 13:06:25 +01:00
hdbg
cfa6e068eb
feat(client): add client metadata and wallet visibility support
2026-03-20 20:41:00 +01:00
47144bdf81
feat(auth): limited RSA support for signing
...
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-test Pipeline failed
ci/woodpecker/pr/server-vet Pipeline failed
see server/clippy.toml
2026-03-14 13:57:13 +01:00
42760bbd79
revert(auth): remove RSA support from authentication and related components
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-test Pipeline was successful
2026-03-14 13:23:06 +01:00
6030f30901
feat(user-agent-auth): add RSA and ECDSA auth key types
...
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-audit Pipeline failed
ci/woodpecker/pr/server-test Pipeline failed
ci/woodpecker/pr/server-vet Pipeline failed
Extend user-agent authentication to support Ed25519, ECDSA (secp256k1), and RSA (PSS+SHA-256) with minimal protocol and storage changes. Add key_type to auth requests and useragent_client, update key parsing/signature verification paths, and keep backward compatibility by treating UNSPECIFIED as Ed25519.
2026-03-14 12:14:30 +01:00
hdbg
6386510f52
merge: evm into main
ci/woodpecker/push/server-audit Pipeline was successful
ci/woodpecker/push/server-lint Pipeline failed
ci/woodpecker/push/server-vet Pipeline failed
ci/woodpecker/push/server-test Pipeline was successful
2026-03-12 16:29:00 +01:00
hdbg
ba86d18250
refactor(server::client::auth): removed state machine and added approval flow coordination
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-test Pipeline was successful
2026-03-12 16:12:19 +01:00
hdbg
2b27da224e
housekeeping: linter
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-test Pipeline was successful
2026-03-11 14:51:54 +01:00
hdbg
9e92b168ba
tests(evm::engine): basic policies tests
2026-03-11 14:50:32 +01:00
hdbg
67fce6f06a
feat(server::evm): more criterion types
2026-03-11 14:08:33 +01:00
hdbg
191b126462
feat(server): initial EVM functionality impl
2026-03-11 14:08:33 +01:00
hdbg
9dca7aff27
feat(proto): add URL parsing and TLS certificate management
2026-03-11 14:07:06 +01:00
hdbg
46a3c1768c
feat(server::key_holder): unique index on (root_key_id, nonce) to avoid nonce reuse
2026-03-11 14:05:42 +01:00
hdbg
281fbcb31d
feat(server): UserAgent seal/unseal
2026-03-11 14:05:42 +01:00
hdbg
ffa60c90b1
feat(auth): simplify auth model and implement bootstrap flow
...
Remove key_identity indirection table, storing public keys and nonces
directly on client tables. Replace AuthResponse with AuthOk, add a
BootstrapActor to manage token lifecycle, and move user agent stream
handling into the actor module.
2026-02-14 12:03:14 +01:00
hdbg
bbbb4feaa0
feat(unseal): add unseal protocol and crypto infrastructure
2026-02-12 18:49:43 +01:00
hdbg
8dd0276185
feat(proto): add separate client/user-agent gRPC services
2026-02-11 13:31:39 +01:00