ACL: an expired/exhausted bound token should hard-reject (false), not fall through to prompt-admin (undefined) — clients time out instead of re-pairing
Fixed via PR #38 (merged to dev @ 3468972). Verified on hardware during the Sintra smoke: an expired/revoked token binding now hard-rejects (BunkerRejectedError → "Pairing Required")…
padreug
deleted branch 2026-06-21 14:01:49 +00:00
fix-create-new-key-idempotent from aiolabs/nsecbunkerd
fix(admin): make create_new_key idempotent — never clobber an existing key (#39)
create_new_key clobbers an existing key — silent, unrecoverable identity loss on re-pair
create_new_key clobbers an existing key — silent, unrecoverable identity loss on re-pair
padreug
created branch fix-create-new-key-idempotent in aiolabs/nsecbunkerd
2026-06-21 13:51:17 +00:00
padreug
deleted branch 2026-06-21 13:42:00 +00:00
feat/optional-machine-npub-pairing-ux from aiolabs/spirekeeper
feat(pairing,ui): optional machine_npub + bunker_relay override + fee decimal-input UX
padreug
deleted branch 2026-06-21 12:57:49 +00:00
issue-36-expired-binding-hard-reject from aiolabs/nsecbunkerd
ACL: an expired/exhausted bound token should hard-reject (false), not fall through to prompt-admin (undefined) — clients time out instead of re-pairing
fix(acl): hard-reject a lapsed token binding instead of prompting (#36)
fix(acl): hard-reject a lapsed token binding instead of prompting (#36)
Reviewed from the bitspire/consumer side — LGTM, approve.
padreug
created branch issue-36-expired-binding-hard-reject in aiolabs/nsecbunkerd
2026-06-21 10:44:47 +00:00
padreug
pushed to issue-36-expired-binding-hard-reject at aiolabs/nsecbunkerd
2026-06-21 10:44:47 +00:00