unibus

T

egutierrez 2ba40701b2 feat(membership): add GET /api/directory for endpoint->handle resolution

Authenticated bus users (member or admin) can now map a sender's endpoint id
back to a readable handle. The endpoint is derived server-side from each user's
sign_pub with frame.EndpointID (base64url(sha256(signPub)), unpadded), matching
the bus's own construction byte-for-byte. Only active users are listed; under
enforce the existing auth middleware rejects an unauthenticated caller with 401.

Tests cover the golden path (two users -> 200 with handles + endpoints), the
auth contract (unsigned -> 401), revoked-user exclusion, and endpoint parity
against the cross-language vector from cmd/busvectors.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-14 15:27:38 +02:00

cmd

feat(membership): trust reverse-proxy forwarded client IP for rate limit

2026-06-14 12:29:57 +02:00

deploy

chore(deploy): version the same-origin Caddy config for uniweb

2026-06-14 12:43:15 +02:00

dev

docs(0007): spec encryption-at-rest del control plane (JetStream/SQLite en disco)

2026-06-07 20:34:35 +02:00

migrations

feat(membership): add 002_users.sql migration and user CRUD store