jwinterm 1181b5938a fix(auth): canonicalize verified Nostr pubkey + harden the link/login grade ...

Adversarial review (Identity Phase 1 flow) findings:

- Canonicalize the pubkey returned by verify_nip98 / verify_signed_action to
  lowercase hex. BIP-340 hex-decode is case-insensitive, so an UPPER-case-hex
  pubkey is a fully self-consistent, verifying event — but stored/looked-up
  verbatim it would let ONE key bind to two accounts via case variance (bypassing
  the UNIQUE index + 409) and yield non-canonical NIP-05 output. Now every
  downstream store/compare/lookup is on the canonical form. +KAT.
- nostr_link records a login event on success: a session-authed link (including a
  rotation that REPLACES an existing npub) is a security-relevant binding change
  and must not be silent.
- Tighten NIP98_LOGIN_MAX_AGE_SECS 60 -> 30s: a captured login token is a bearer
  credential within the window; match it to the state-change grade.

2026-07-02 05:43:20 -04:00

..

crypto

fix(auth): canonicalize verified Nostr pubkey + harden the link/login grade

2026-07-02 05:43:20 -04:00

admin_session.rs

feat(admin): admin auth flow + guard + loopback plane [operator §1.1-1.4, §2.1]

2026-06-26 06:36:55 -04:00

invite.rs

feat(registration): composable gate framework + invite codes (gate #1)

2026-06-30 17:14:53 -04:00

mod.rs

feat(restore): default create-only + PoW-priced restore depth (gate #2)

2026-06-30 18:35:20 -04:00

pow.rs

feat: session/JWT + PoW gate (config-driven, strict)

2026-06-22 13:57:28 -04:00

restore_pow.rs

feat(restore): default create-only + PoW-priced restore depth (gate #2)

2026-06-30 18:35:20 -04:00

secret.rs

feat: LWS client for Monero/Wownero (hardened, generic)

2026-06-22 23:18:58 -04:00

session.rs

feat(admin): admin session JWTs + admin_sessions queries [operator §0.3]

2026-06-25 18:46:50 -04:00