Commit Graph

38 Commits

Author SHA1 Message Date
hdbg
bdb9f01757 refactor(server): actors reorganization & linter fixes 2026-02-16 21:43:59 +01:00
hdbg
0805e7a846 feat(keyholder): add seal method and unseal integration tests 2026-02-16 21:38:29 +01:00
hdbg
eb9cbc88e9 feat(server::user-agent): Unseal implemented 2026-02-16 21:17:06 +01:00
hdbg
dd716da4cd test(keyholder): remove unused imports from test modules 2026-02-16 21:15:13 +01:00
hdbg
1545db7428 fix(ci): add protoc installation for lints
Some checks failed
ci/woodpecker/push/server-audit Pipeline was successful
ci/woodpecker/push/server-vet Pipeline failed
ci/woodpecker/push/server-lint Pipeline failed
ci/woodpecker/push/server-test Pipeline was successful
2026-02-16 21:14:55 +01:00
hdbg
20ac84b60c fix(ci): add clippy installation in mise.toml
Some checks failed
ci/woodpecker/push/server-audit Pipeline was successful
ci/woodpecker/push/server-vet Pipeline failed
ci/woodpecker/push/server-lint Pipeline failed
ci/woodpecker/push/server-test Pipeline was successful
2026-02-16 21:04:13 +01:00
hdbg
8f6dda871b refactor(actors): rename BootstrapActor to Bootstrapper 2026-02-16 21:01:53 +01:00
hdbg
47108ed8ad chore(supply-chain): update cargo-vet audits and trusted publishers
Some checks failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-test Pipeline was successful
ci/woodpecker/push/server-lint Pipeline failed
ci/woodpecker/push/server-audit Pipeline was successful
ci/woodpecker/push/server-vet Pipeline failed
ci/woodpecker/push/server-test Pipeline was successful
2026-02-16 20:52:31 +01:00
hdbg
359df73c2e feat(server::key_holder): unique index on (root_key_id, nonce) to avoid nonce reuse 2026-02-16 20:45:15 +01:00
hdbg
ce03b7e15d feat(server::key_holder): ability to remotely get current state 2026-02-16 20:40:36 +01:00
hdbg
e4038d9188 refactor(keyholder): rename KeyHolderActor to KeyHolder and optimize db connection lifetime 2026-02-16 20:36:47 +01:00
hdbg
c82339d764 security(server::key_holder): replaced nonce-caching with exclusive transaction fetching nonce from the database 2026-02-16 18:23:25 +01:00
hdbg
c5b51f4b70 feat(server): UserAgent seal/unseal
Some checks failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-test Pipeline was successful
2026-02-16 14:00:23 +01:00
hdbg
6b8f8c9ff7 feat(unseal): add unseal protocol support for user agents 2026-02-15 13:04:55 +01:00
hdbg
8263bc6b6f feat(server): boot mechanism 2026-02-15 01:44:12 +01:00
hdbg
a6c849f268 ci: add server linting pipeline for Rust code quality checks 2026-02-14 23:44:16 +01:00
hdbg
d8d65da0b4 test(user-agent): add challenge-response auth flow test 2026-02-14 23:43:36 +01:00
hdbg
abdf4e3893 tests(server): UserAgent invalid bootstrap token 2026-02-14 19:48:37 +01:00
hdbg
4bac70a6e9 security(server): cargo-vet proper init
All checks were successful
ci/woodpecker/push/server-audit Pipeline was successful
ci/woodpecker/push/server-vet Pipeline was successful
ci/woodpecker/push/server-test Pipeline was successful
2026-02-14 19:16:09 +01:00
hdbg
54a41743be housekeeping(server): trimmed-down dependencies 2026-02-14 19:04:50 +01:00
hdbg
02ed243810 ci(server): introduce cargo-audit pipeline 2026-02-14 19:04:50 +01:00
hdbg
93005199e9 fix(ci): protoc installation for arbiter-proto compilation
All checks were successful
ci/woodpecker/push/server-test Pipeline was successful
2026-02-14 19:00:34 +01:00
hdbg
72b680f103 fix(ci): mise docker image
Some checks failed
ci/woodpecker/push/server-test Pipeline failed
2026-02-14 18:40:53 +01:00
hdbg
90f2476f3d ci(server): introduce tests pipeline
Some checks failed
ci/woodpecker/push/server-test Pipeline failed
2026-02-14 18:39:57 +01:00
hdbg
81a55d28f0 test(db): add create_test_pool and use in tests 2026-02-14 18:33:33 +01:00
hdbg
69dd8f57ca tests(server): UserAgent bootstrap token auth flow test 2026-02-14 18:16:19 +01:00
hdbg
345a967c13 refactor(server): separated UserAgentActor gRPC transport related things into separate module 2026-02-14 17:58:25 +01:00
hdbg
069a997691 feat(server): UserAgent auth flow implemented 2026-02-14 17:53:58 +01:00
hdbg
ffa60c90b1 feat(auth): simplify auth model and implement bootstrap flow
Remove key_identity indirection table, storing public keys and nonces
directly on client tables. Replace AuthResponse with AuthOk, add a
BootstrapActor to manage token lifecycle, and move user agent stream
handling into the actor module.
2026-02-14 12:03:14 +01:00
hdbg
8fb7a04102 misc: spec refactor :) 2026-02-13 17:24:20 +01:00
hdbg
056cd4af40 misc: initial spec 2026-02-13 17:18:50 +01:00
hdbg
832d884457 feat(auth): implement bootstrap token auth handling 2026-02-13 16:35:54 +01:00
hdbg
208bbbd540 feat: actors experiment 2026-02-13 13:37:58 +01:00
hdbg
bbbb4feaa0 feat(unseal): add unseal protocol and crypto infrastructure 2026-02-12 18:49:43 +01:00
hdbg
8dd0276185 feat(proto): add separate client/user-agent gRPC services 2026-02-11 13:31:39 +01:00
hdbg
5b27c78bfc feat: initial schema 2026-02-10 19:00:53 +01:00
hdbg
7816518977 feat(auth): add protobuf definitions for AuthService 2026-02-10 14:01:26 +01:00
hdbg
284f997cbe misc: initial layout 2026-02-09 15:31:38 +01:00