contrail/packages/contrail-record-host/ at pr42 · flo-bit.dev/contrail · Tangled

flo-bit.dev / contrail

0

[READ-ONLY] Mirror of https://github.com/flo-bit/contrail. atproto backend in a bottle flo-bit.dev/contrail/

0

contrail / packages / contrail-record-host /

at pr42 1 folder 5 files

github-actions[bot] Version Packages 7w ago

fix(record-host): require owner-signed enrollment The recordHost.enroll endpoint accepted either an owner-signed call OR a self-attested authority call. The latter let any DID claim to be the authority for any space's URI and rebind that space's authority. Drop the self-attesting-authority branch. Require the caller to be the space owner (sa.issuer === parts.ownerDid). The owner is still free to designate any authority via body.authority — only the legitimacy of the caller changes. Updates the existing test that codified the old behavior to assert the new rejection, and adds a positive test for the canonical owner-driven split-deployment enrollment flow.

2 months ago

Version Packages

1 month ago

Version Packages

1 month ago

tsconfig.build.json

phase 7a pt2

3 months ago

phase 7a pt2

3 months ago

phase 7a pt2

3 months ago