jwinterm 8d4f78a8a3 feat(auth): wire the Nostr link nonce — link-challenge endpoint + atomic consume ...

The link flow was stubbed: consume_link_nonce always returned false and no nonce
issuer existed, so nostr_login worked only for already-linked npubs and nothing
could link one. Complete it:

- GET /auth/nostr/link-challenge (authenticated) issues a single-use nonce via
  the existing challenge store, bound to the caller (subject) + the nostr_link
  purpose, 5-minute TTL.
- nostr_link now consumes it atomically (DELETE … RETURNING, so a replay loses
  the race), cross-checks the nonce was issued to THIS user, then verifies the
  signed-action proof (unchanged) and stores the npub.
- Route registered + OpenAPI regenerated (no drift).

tests/nostr_auth.rs: pins the empty-body descriptor hash as a cross-impl KAT (the
wallet binds the identical value), and covers a full challenge→link round-trip
plus replay and wrong-user-nonce rejection.

2026-07-02 04:36:40 -04:00

..

common

feat(registration): pay-to-register via pluggable payment provider (gate #3)

2026-06-30 21:30:12 -04:00

.env.example

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

admin_audit.rs

feat(admin): tamper-evident privileged-action audit chain [operator §0.4]

2026-06-26 06:06:54 -04:00

admin_auth.rs

feat(admin): allowlist key CRUD + kill-switches [operator §1.5]

2026-06-26 06:46:07 -04:00

admin_keys.rs

feat(admin): allowlist + integrity-MAC data model [operator §0.3/§1.2]

2026-06-25 18:38:57 -04:00

admin_plane.rs

feat(admin,landing): admin-plane hardening + public landing [operator §2]

2026-06-27 15:32:11 -04:00

admin_sessions.rs

feat(admin): admin session JWTs + admin_sessions queries [operator §0.3]

2026-06-25 18:46:50 -04:00

auth_flow.rs

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

capabilities.rs

feat(capabilities): honest secret-presence downgrade + admin features view [operator §4]

2026-06-27 15:35:56 -04:00

challenges.rs

feat(db): unified single-use challenge store [operator §0.2]

2026-06-25 17:33:59 -04:00

db_queries.rs

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

erasure.rs

fix(erasure): harden per adversarial review (Subsystem 5)

2026-06-28 07:59:52 -04:00

invite_codes.rs

feat(registration): composable gate framework + invite codes (gate #1)

2026-06-30 17:14:53 -04:00

landing.rs

feat(admin,landing): admin-plane hardening + public landing [operator §2]

2026-06-27 15:32:11 -04:00

nostr_auth.rs

feat(auth): wire the Nostr link nonce — link-challenge endpoint + atomic consume

2026-07-02 04:36:40 -04:00

payment_invoices.rs

feat(registration): pay-to-register via pluggable payment provider (gate #3)

2026-06-30 21:30:12 -04:00

prices.rs

fix(prices,config): harden per-feed control + fail-closed gaps (adversarial review)

2026-06-25 17:25:52 -04:00

rate_limit.rs

feat: per-IP rate limiting (tower_governor tiers) + ConnectInfo wiring

2026-06-23 19:02:03 -04:00

server_config.rs

fix(admin): create-admin-wallet fully bootstraps a fresh instance (latch + compose)

2026-07-02 03:19:32 -04:00

wallet_btc_ltc.rs

feat: BTC/LTC wallet handlers (electrum proxy, authenticated)

2026-06-23 11:57:43 -04:00

wallet_grin_relay.rs

feat: Grin slatepack relay (non-custodial async mailbox, feature-flagged)

2026-06-23 17:39:13 -04:00

wallet_grin.rs

feat: Grin wallet handlers (view-only, non-custodial)

2026-06-23 16:02:44 -04:00

wallet_xmr_wow.rs

feat: XMR/WOW wallet handlers (LWS proxy, stateless-forward)

2026-06-23 14:32:38 -04:00