docs(pairing): TTL + token-revoke now enforced post-bind (nsecbunkerd#27)
padreug
created branch docs/ttl-revoke-enforced-post-bind in aiolabs/spirekeeper
2026-06-19 21:23:14 +00:00
padreug
pushed to docs/ttl-revoke-enforced-post-bind at aiolabs/spirekeeper
2026-06-19 21:23:14 +00:00
padreug
deleted branch 2026-06-19 21:09:44 +00:00
issue-29-acl-integration-tests from aiolabs/nsecbunkerd
test(acl): DB-backed integration tests for checkIfPubkeyAllowed (#29)
Add a DB-backed test harness + integration tests for checkIfPubkeyAllowed
docs: migration & DB-maintenance runbook (never full-wipe nsecbunker.db)
padreug
created branch issue-29-acl-integration-tests in aiolabs/nsecbunkerd
2026-06-19 21:03:44 +00:00
docs: migration & DB-maintenance runbook (never full-wipe nsecbunker.db)
Trim applyToken SigningCondition fan-out once override layer is rarely-consulted
Token
expiresAt (TTL) is not enforced post-bind — sign-time ACL ignores it
Trim applyToken SigningCondition fan-out once override layer is rarely-consulted
Superseded by #27 (merged + deployed). This issue asked to trim the applyToken SigningCondition fan-out once the override layer became rarely-consulted — #27 went further and **removed it…