egutierrez 1bcca987a4 test(membership): regression for H6 owner spoof and H7 nonce-cache poison ...

TestAudit_OwnerSpoof: a body declaring a foreign owner endpoint or signing key
is 403; a self-owned create is 201.
TestAudit_NonceCachePoisonPreAuth: an unregistered identity's repeated nonce
still fails 'not authorized' (never 'replayed'), proving it was not cached, while
an authorized identity's replay is still rejected.
Nonce cache unit tests: prune-after-TTL and cap-bounded memory.

2026-06-07 14:36:22 +02:00

android

feat(android): app Kotlin/Compose sobre el binding gomobile

2026-06-06 18:43:10 +02:00

cmd

feat(client,membershipd): TLS on the HTTP control plane (H5)

2026-06-07 14:30:15 +02:00

deploy

feat(deploy/tls): self-signed CA + server cert generator

2026-06-07 12:44:13 +02:00

dev

feat(membership): forbid cleartext rooms on public deployments (H4 min defense)

2026-06-07 14:26:45 +02:00

migrations

feat(membership): add 002_users.sql migration and user CRUD store

2026-06-07 12:23:11 +02:00

mobile

feat(client,cmd,mobile): connect securely via client.Connect(caPath)

2026-06-07 12:49:19 +02:00

pkg

test(membership): regression for H6 owner spoof and H7 nonce-cache poison

2026-06-07 14:36:22 +02:00

playground

docs(0001e): note remaining gateway and unibots migration

2026-06-07 12:49:19 +02:00

web

feat(web): SPA de chat (React + Vite + Mantine v9)

2026-06-06 18:43:10 +02:00

.gitignore

chore: sync from fn-registry agent

2026-06-03 21:37:25 +02:00

app.md

docs(app): bump to 0.4.0 — room discovery endpoint growth log

2026-06-07 03:08:07 +02:00

go.mod

feat(membership): bound request bodies and add per-IP rate limit

2026-06-07 14:16:04 +02:00

go.sum

feat(membership): bound request bodies and add per-IP rate limit

2026-06-07 14:16:04 +02:00

S

Description

Synced from fn_registry

1.3 MiB

Languages

Go 94.2%

TypeScript 3.1%

Shell 2.6%