Skipper
|
e6724cb8d3
|
merge: refactor-integrity-check into main
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
6b572d0c86
|
housekeeping(server): clean too-broad visibility markers and organize imports
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
d7ca0b4fc8
|
housekeeping(server): dependencies upgrade
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
bf63279f73
|
merge: refactor-integrity-check into main
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
539265e3b1
|
docs: updated to new auth challenge format and removed stale TOCTOU race condition note
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
270e843598
|
fix(server::tests): api surface of auth challenge changed
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
0a48839321
|
refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
f6151293d4
|
refactor(server): now keeps track of useragents, instead of
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
3bbf713e67
|
refactor(server::grpc::vault_gate): standard approach using / traits
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
810656702b
|
fix(server): sending fixed vault state when on stage
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
4823a291f8
|
WIP: kameo::messages wiring for transport generalization
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
1d9b572565
|
feat(user-agent): add VaultGate for sealed vault authentication
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
af7e90dcad
|
fix(server::integrity): vault now differentias between expected/unexpected states for commands more granularly
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
d2f41e693c
|
fix(server::user_agent): useragents now self-sign themselves on bootstrap
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
9650407093
|
refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus
|
2026-08-26 13:00:40 +02:00 |
|
CleverWild
|
247cb90fbf
|
refactor(hashing): introduce Hashable derive macro and migrate server types
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
a49baf7386
|
housekeeping(server): fixed clippy warns
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
6b814f4869
|
refactor(server): moved shared module crypto into arbiter-crypto
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
4c2e00b56d
|
refactor(server): migrated auth to ml-dsa
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
13fb31f841
|
fix(server::bootsrapper): token compare is now constant-time
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
2df25b8641
|
tests(server::client::auth): integrity envelope insertion for valid paths
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
11ad5df426
|
feat(server): add integrity verification for client keys
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
bd0a8f3907
|
tests(server): property-based testing for ordering independency for hash
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
d482ed37aa
|
fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
dcf42b0e4e
|
fix(server): added chain_id check and covered check_shared_constraints with unit tests
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
38284d84b6
|
tests(server): initial cargo-mutants
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
498e2e3145
|
fix(server): simplify hash function for debug profile
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
9173be2920
|
tests(server): fixed for new integrity checks
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
d55e9880ec
|
refactor(server): rework envelopes and integrity check
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
ba7bfe9b6f
|
fix(server): remove stale mentions of miette
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
6a0c512773
|
chore: inline integrity proto types
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
4bd8a2df33
|
feat(server): integrity envelope engine for EVM grants with HMAC verification
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
37fa954933
|
merge: @main into client-integrity-verification
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
5c3421de1e
|
housekeeping(server): fixed clippy warns
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
be23f87e67
|
refactor(user-agent): remove backfill pubkey integrity tags
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
29f2174dcf
|
fix(server): previously, user agent auth accepted invalid signatures
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
149035ecf5
|
refactor(server): separate crypto by purpose and moved outside of actor into separate module
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
17ea8d8dc9
|
feat(auth): implement attestation status verification for public keys
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
e9e2888e95
|
fix(keyholder): comment drift
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
0b30416a7b
|
refactor(keyholder): generalize derive_useragent_integrity_key and compute_useragent_pubkey_integrity_tag corespondenly to derive_integrity_key and compute_integrity_tag
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
e2e2c4fc07
|
feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
8aaeec078b
|
refactor(proto): restructure wallet access messages for improved data organization
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
3ca2554468
|
refactor(server::evm): removed repetetive errors and error variants
|
2026-08-26 13:00:39 +02:00 |
|
|
|
9ea474e1b2
|
fix(server): use LOCALHOST const instead of hard-coded ip value
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-test Pipeline was successful
|
2026-04-04 14:14:15 +00:00 |
|
hdbg
|
083ff66af2
|
refactor(server): removed miette out of server
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-test Pipeline was successful
|
2026-04-04 12:10:34 +02:00 |
|
hdbg
|
0362044b83
|
housekeeping(server): fixed clippy warns
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-lint Pipeline failed
ci/woodpecker/pr/server-test Pipeline was successful
ci/woodpecker/pr/useragent-analyze Pipeline failed
|
2026-04-03 22:20:07 +02:00 |
|
hdbg
|
bc45b9b9ce
|
merge: @main into refactor-proto
|
2026-04-03 22:20:07 +02:00 |
|
hdbg
|
82b5b85f52
|
refactor(proto): nest client protocol and extract shared schemas
|
2026-04-03 22:20:07 +02:00 |
|
|
|
4af172e49a
|
Merge branch 'main' into feat--self-signed-transactions
|
2026-04-03 22:20:07 +02:00 |
|
hdbg
|
cfe01ba1ad
|
refactor(server, protocol): split big message files into smaller and domain-based
|
2026-04-03 22:20:07 +02:00 |
|
