hdbg
c6e13dc476
feat(keyholder): add seal method and unseal integration tests
2026-03-11 14:05:42 +01:00
hdbg
8f5d4cc385
feat(server::user-agent): Unseal implemented
2026-03-11 14:05:42 +01:00
hdbg
2ffd60973d
test(keyholder): remove unused imports from test modules
2026-03-11 14:05:42 +01:00
hdbg
b05cdeec66
refactor(actors): rename BootstrapActor to Bootstrapper
2026-03-11 14:05:42 +01:00
hdbg
9ec465706a
chore(supply-chain): update cargo-vet audits and trusted publishers
2026-03-11 14:05:42 +01:00
hdbg
46a3c1768c
feat(server::key_holder): unique index on (root_key_id, nonce) to avoid nonce reuse
2026-03-11 14:05:42 +01:00
hdbg
6c8a67c520
feat(server::key_holder): ability to remotely get current state
2026-03-11 14:05:42 +01:00
hdbg
bbaed3fb97
refactor(keyholder): rename KeyHolderActor to KeyHolder and optimize db connection lifetime
2026-03-11 14:05:42 +01:00
hdbg
4700bc407e
security(server::key_holder): replaced nonce-caching with exclusive transaction fetching nonce from the database
2026-03-11 14:05:42 +01:00
hdbg
281fbcb31d
feat(server): UserAgent seal/unseal
2026-03-11 14:05:42 +01:00
hdbg
a55221573b
feat(unseal): add unseal protocol support for user agents
2026-03-11 14:03:46 +01:00
hdbg
45acb45a05
feat(server): boot mechanism
2026-03-11 14:03:46 +01:00
hdbg
f769c9119b
test(user-agent): add challenge-response auth flow test
2026-03-11 14:03:45 +01:00
hdbg
1145642255
tests(server): UserAgent invalid bootstrap token
2026-03-11 14:03:45 +01:00
hdbg
9f33277a4f
security(server): cargo-vet proper init
2026-03-11 14:03:45 +01:00
hdbg
0a8e1dce3f
housekeeping(server): trimmed-down dependencies
2026-03-11 14:03:45 +01:00
hdbg
81a55d28f0
test(db): add create_test_pool and use in tests
2026-02-14 18:33:33 +01:00
hdbg
69dd8f57ca
tests(server): UserAgent bootstrap token auth flow test
2026-02-14 18:16:19 +01:00
hdbg
345a967c13
refactor(server): separated UserAgentActor gRPC transport related things into separate module
2026-02-14 17:58:25 +01:00
hdbg
069a997691
feat(server): UserAgent auth flow implemented
2026-02-14 17:53:58 +01:00
hdbg
ffa60c90b1
feat(auth): simplify auth model and implement bootstrap flow
...
Remove key_identity indirection table, storing public keys and nonces
directly on client tables. Replace AuthResponse with AuthOk, add a
BootstrapActor to manage token lifecycle, and move user agent stream
handling into the actor module.
2026-02-14 12:03:14 +01:00
hdbg
832d884457
feat(auth): implement bootstrap token auth handling
2026-02-13 16:35:54 +01:00
hdbg
208bbbd540
feat: actors experiment
2026-02-13 13:37:58 +01:00
hdbg
bbbb4feaa0
feat(unseal): add unseal protocol and crypto infrastructure
2026-02-12 18:49:43 +01:00
hdbg
8dd0276185
feat(proto): add separate client/user-agent gRPC services
2026-02-11 13:31:39 +01:00
hdbg
5b27c78bfc
feat: initial schema
2026-02-10 19:00:53 +01:00
hdbg
7816518977
feat(auth): add protobuf definitions for AuthService
2026-02-10 14:01:26 +01:00
hdbg
284f997cbe
misc: initial layout
2026-02-09 15:31:38 +01:00
