Repository navigation

fix: sign every request instead of sending the server token; no local lockout (review D-01, D-02) - #35

Merged

HackTuah merged 9 commits into

mainfrom

Oct 7, 2026

Merged

fix: sign every request instead of sending the server token; no local lockout (review D-01, D-02)#35
HackTuah merged 9 commits into
mainfrom
fix/sec-d-auth

Commits on Oct 7, 2026
- fix(server): no local program or web page can lock the extension out (D-02)
  
  Ayla Croft
  and
  claude
  committed
  0048fe8
- fix(server): accept signed requests and sign every answer to them (D-01)
  
  Ayla Croft
  and
  claude
  committed
  9078269
- fix(extension): never send the server's token; sign each request (D-01)
  
  Ayla Croft
  and
  claude
  committed
  f2e87d8
- docs: signed requests and this computer's addresses in the assurance case (D-01, D-02)
  
  Ayla Croft
  and
  claude
  committed
  4d7fb90
- test(extension): wait for the lookup status after an add, not a fixed 20 ms
  
  Ayla Croft
  and
  claude
  committed
  1553927
- fix(server): limit what a reverse proxy on this computer forwards (D-02)
  
  Ayla Croft
  and
  claude
  committed
  3300a87
- Merge remote-tracking branch 'origin/main' into fix/sec-d-auth
  Ayla Croft
  committed
  e546a87
- test(extension): content tests wait for the page to go quiet, not one task
  
  Ayla Croft
  and
  claude
  committed
  f888a22
- Merge branch 'main' into fix/sec-d-auth
  HackTuah
  authored
  2545db3