fix/audit-security #2

Merged

faicel merged 40 commits from fix/audit-security into dev 2026-09-15 12:11:44 +00:00

Conversation 0 Commits 40 Files changed 61 +8854 -2675

faicel commented 2026-09-15 12:05:44 +00:00

Owner

Copy link

No description provided.

faicel added 40 commits 2026-09-15 12:05:44 +00:00

update cargo 155f1169aa

update readme.md 70fdd45c04

update package 620f52940e

fix(tests): use valid colon-separated hex MAC literals so db_handler accepts them 04a12dcf85

refactor(bin): compile the module tree once by consuming the lib crate f04182048a

chore: remove dead legacy src/tests.sh duplicate of scripts/tests.sh 28f71e4ca1

chore(deps): move test-only crates to dev-dependencies and trim unused features d2ad9ff61a

refactor: remove dead Default impl for ResponseChannels and document new()'s TTL 741fb833fb

chore(proto): remove unused delete and sensor_status contracts from the published client surface 3919498f33

refactor(server): single shared server assembly with production BearerAuth proven by auth tests f0c670e319

refactor(tests): align test layout with <module>/tests/mod.rs convention 32a5e02fb5

refactor(install): broadcast deletions without orphan response channels bf1de289e6

chore: track tests/README.md with anchored markdown ignore rules 90664d6ba5

docs: translate remaining French comments in build script and install proto bf6cfb9a4c

chore(scripts): parameterize CONFIG_FILE instead of personal absolute paths 5b249e9090

chore: drop dead info ignore rule after local cleanup a9f75b687b

ci: lint the dev feature so the simulation block cannot bitrot 34089e4499

perf(broadcaster): non-blocking fan-out with RESOURCE_EXHAUSTED saturation policy 728ea6ff4e

perf(install): remove per-request response channel on terminal paths 84a848452f

perf(common): response channels cleanup task exits with its owner 68c3b49971

perf(common): single-pass expiry and per-registration TTL refresh 3424b522d6

perf: remove hot-path console writes from subscription and device flows 8eaeaa4df9

perf(deps): replace tokio full with the six proven features 39712d8031

feat(auth): add email login with opaque session tokens 8dcdadada3

feat(cli): add user provisioning with atomic password reset 5c019d8dfc

feat(auth): enforce mandatory fail-closed authorization across all services 22b940d8d4

feat(auth): bound login abuse with per-identity budgets and capped verification dcba60fac5

feat(install): replace MAC-only completion with single-use operation tokens ebafe0e2e4

feat(net): restrict plaintext gRPC to loopback behind the on-host TLS terminator b8a6222395

feat(net): bound server state with resource admission limits bd3e2a6bc5

feat(validation): reject malformed RPC inputs before any side effect e73242dd26

fix(errors): remove internal details from gRPC status messages 9a93d5434e

feat(cors): enforce a fail-closed origin allowlist instead of wildcard 43664a875f

docs: record upstream dependency debt and correct h2 advisory waiver comment bf892b35a6

chore(deps): drop the legacy advisory waivers after the db_handler 0.4.2 upgrade 8ce1e7d5e7

ci: migrate the check gate to the shared central workflow 359b37b83d

fix(broadcaster): bound saturation delivery tasks with single-flight and a timeout 000cc56215

fix(auth): serialize registry admission and make the retry-window test deterministic 241d43b2ca

ci: reuse the central tag workflows instead of duplicating tag creation 32b47979cc

update version 9091731ecd

faicel merged commit c92e60744b into dev 2026-09-15 12:11:44 +00:00

faicel deleted branch fix/audit-security 2026-09-15 12:11:44 +00:00

faicel referenced this pull request from a commit 2026-09-15 12:11:44 +00:00

Merge pull request 'fix/audit-security' (#2) from fix/audit-security into dev

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

homeiot/grpc_server!2

No description provided.