padreug
0 followers · 0 following
  • Joined on 2025-12-31
Repositories
6
 Projects Packages Public activity Starred repositories
padreug deleted branch issue-29-acl-integration-tests from aiolabs/nsecbunkerd 2026-06-19 21:09:44 +00:00
padreug merged pull request aiolabs/nsecbunkerd#33 2026-06-19 21:09:42 +00:00
test(acl): DB-backed integration tests for checkIfPubkeyAllowed (#29)
padreug closed issue aiolabs/nsecbunkerd#29 2026-06-19 21:09:42 +00:00
Add a DB-backed test harness + integration tests for checkIfPubkeyAllowed
padreug deleted branch docs-migration-runbook from aiolabs/nsecbunkerd 2026-06-19 21:09:29 +00:00
padreug pushed to dev at aiolabs/nsecbunkerd 2026-06-19 21:09:28 +00:00
14e20d50d4 docs: add migration & DB-maintenance runbook (never full-wipe nsecbunker.db)
padreug merged pull request aiolabs/nsecbunkerd#32 2026-06-19 21:09:27 +00:00
docs: migration & DB-maintenance runbook (never full-wipe nsecbunker.db)
padreug created pull request aiolabs/nsecbunkerd#33 2026-06-19 21:04:03 +00:00
test(acl): DB-backed integration tests for checkIfPubkeyAllowed (#29)
padreug created branch issue-29-acl-integration-tests in aiolabs/nsecbunkerd 2026-06-19 21:03:44 +00:00
padreug pushed to issue-29-acl-integration-tests at aiolabs/nsecbunkerd 2026-06-19 21:03:44 +00:00
bbcc9cd998 test(acl)(#29): DB-backed integration tests for checkIfPubkeyAllowed
padreug created pull request aiolabs/nsecbunkerd#32 2026-06-19 20:58:29 +00:00
docs: migration & DB-maintenance runbook (never full-wipe nsecbunker.db)
padreug created branch docs-migration-runbook in aiolabs/nsecbunkerd 2026-06-19 20:58:17 +00:00
padreug pushed to docs-migration-runbook at aiolabs/nsecbunkerd 2026-06-19 20:58:17 +00:00
14e20d50d4 docs: add migration & DB-maintenance runbook (never full-wipe nsecbunker.db)
padreug closed issue aiolabs/nsecbunkerd#12 2026-06-19 20:55:50 +00:00
Trim applyToken SigningCondition fan-out once override layer is rarely-consulted
padreug closed issue aiolabs/nsecbunkerd#25 2026-06-19 20:55:39 +00:00
Design discussion / RFC: enforce token + grant lifecycle at sign time (the root behind #24)
padreug closed issue aiolabs/nsecbunkerd#24 2026-06-19 20:55:34 +00:00
Token expiresAt (TTL) is not enforced post-bind — sign-time ACL ignores it
padreug commented on issue aiolabs/nsecbunkerd#12 2026-06-19 20:55:22 +00:00
Trim applyToken SigningCondition fan-out once override layer is rarely-consulted

Superseded by #27 (merged + deployed). This issue asked to trim the applyToken SigningCondition fan-out once the override layer became rarely-consulted — #27 went further and **removed it…

padreug commented on issue aiolabs/nsecbunkerd#25 2026-06-19 20:55:15 +00:00
Design discussion / RFC: enforce token + grant lifecycle at sign time (the root behind #24)

Option D (leaning D1) implemented and deployed to all servers via #27 (merge 992c6a8):

padreug commented on issue aiolabs/nsecbunkerd#24 2026-06-19 20:55:10 +00:00
Token expiresAt (TTL) is not enforced post-bind — sign-time ACL ignores it

Fixed by #27 (merge 992c6a8), deployed to all servers 2026-06-19.

padreug commented on pull request aiolabs/nsecbunkerd#27 2026-06-19 16:51:28 +00:00
fix(acl): enforce token grant lifecycle live at sign time (#24, #25)

Correction: on LNbits-connected instances, the remediation is targeted delete only — never a full wipe

padreug opened issue aiolabs/nsecbunkerd#31 2026-06-19 16:32:56 +00:00
Remove the redundant, always-failing npm run prisma:migrate step in start.js