niko_trust

Niko/niko_trust

Fork 0

Commit graph

Author	SHA1	Message	Date
Niko Marmeladkov	3bf13fa488	Public SDK packages, proxy-aware rate limits, service login recipe - internal/{address,identity,protocol,tce,transport,verify} -> pkg/ so external Go projects can import the verified core; invariant tests updated for the new paths - Config.TrustProxy: key rate limiting by X-Forwarded-For when the relay sits behind a reverse proxy (off by default, header never trusted otherwise) - examples/service + examples/approve: complete passwordless login round trip (mint request -> wallet approves -> local verify), run live in CI - docs/SERVICE-GUIDE.md: the integration recipe	2026-08-26 12:49:54 +03:00
Niko Marmeladkov	9d66003689	Initial commit: signed-object trust relay, verifier, and docs - server: relay storing signed objects (PUT/GET), per-IP rate limiting, per-subject quota (1000), one-response-per-request, pagination, /v1/healthz /v1/readyz /v1/metrics - verify: signature-verifying trust evaluator; every object is checked via env.Verify(), approvals via VerifyApprovalResponse, revocations via VerifyRevocationOf; k-of-n approval quorum - docs: TRUST-MODEL.md and API.md describing issuer-anchored signatures and the endpoint/status-code contract - tests: server, verify, and ratelimit packages	2026-08-12 22:36:49 +03:00

Author

SHA1

Message

Date

Niko Marmeladkov

3bf13fa488

Public SDK packages, proxy-aware rate limits, service login recipe

- internal/{address,identity,protocol,tce,transport,verify} -> pkg/ so
  external Go projects can import the verified core; invariant tests
  updated for the new paths
- Config.TrustProxy: key rate limiting by X-Forwarded-For when the relay
  sits behind a reverse proxy (off by default, header never trusted
  otherwise)
- examples/service + examples/approve: complete passwordless login round
  trip (mint request -> wallet approves -> local verify), run live in CI
- docs/SERVICE-GUIDE.md: the integration recipe

2026-08-26 12:49:54 +03:00

Niko Marmeladkov

9d66003689

Initial commit: signed-object trust relay, verifier, and docs

- server: relay storing signed objects (PUT/GET), per-IP rate limiting,
  per-subject quota (1000), one-response-per-request, pagination,
  /v1/healthz /v1/readyz /v1/metrics
- verify: signature-verifying trust evaluator; every object is checked via
  env.Verify(), approvals via VerifyApprovalResponse, revocations via
  VerifyRevocationOf; k-of-n approval quorum
- docs: TRUST-MODEL.md and API.md describing issuer-anchored signatures and
  the endpoint/status-code contract
- tests: server, verify, and ratelimit packages

2026-08-12 22:36:49 +03:00

2 commits