sami7777/dashcaddy
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

P7 spec rev4: pin provider-contract unblock wording, PKCS8-prefix X25519 private-key extraction, DC-143 authorization-vs-key-expiry distinction

Browse Source
This commit is contained in:
Hermes committed 2026-10-03 21:31:08 -07:00
1 parent 5f47e12f18
commit a4f961d609
2 files changed
+17 -11
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

BACKLOG.md
+5 -3
View File
@@ -473,9 +473,11 @@ Tickets DC-046 through DC-049 implement pluggable auth + email magic link. Sami
- **status:** todo
- **details:** POST `/network/people/:id/block|unblock|remove`,
`/network/devices/:id/revoke`. Orchestrates: provider calls, session kill
(existing auth store), access-map purge/restore, audit log entries. Block must
be fully reversible (snapshots pre-block grants). Remove deletes devices +
person record. Tests: orchestration order (mocked provider), honest unblock
(existing auth store), access-map purge/restore, audit log entries. Block
snapshots pre-block grants; unblock restores the AUTHORIZATION state (grants,
status, sessions) — Tailscale device keys, once expired, are irreversible and
require re-authentication (reauthRequired=true + user note); WireGuard peers
restore immediately. Remove deletes devices + person record. Tests: orchestration order (mocked provider), honest unblock
semantics (Tailscale: reauthRequired true + note; WireGuard: immediate
restore), last-admin guard integration, audit entries written.