justme 4841f7b15b feat: bind each node to the binary it runs at its first handshake; refuse changes that are not in a CI-signed manifest [CI]

2026-10-08 05:39:13 +08:00

..

Admin

feat: bind each node to the binary it runs at its first handshake; refuse changes that are not in a CI-signed manifest [CI]

2026-10-08 05:39:13 +08:00

Common

feat!: drop the backend-side elevation windows; password and passkey sessions share capabilities, passkeys guard what nodes verify; the trust page lists added and removed passkeys [CI]

2026-10-08 04:57:28 +08:00

Contracts

feat: bind each node to the binary it runs at its first handshake; refuse changes that are not in a CI-signed manifest [CI]

2026-10-08 05:39:13 +08:00

Public

feat: trust forwarded client addresses only from configured proxies (rate limit, audit, SSE) [CI]

2026-10-07 22:51:44 +08:00

Web

feat: serve the web apps from the Backend (embedded, allow-listed, no filesystem access) so passkeys bind to the panel's own domain [CI]

2026-10-08 04:09:40 +08:00

ApiModule.cs

feat: bind each node to the binary it runs at its first handshake; refuse changes that are not in a CI-signed manifest [CI]

2026-10-08 05:39:13 +08:00

EmbeddedReleaseKey.cs

feat: bind each node to the binary it runs at its first handshake; refuse changes that are not in a CI-signed manifest [CI]

2026-10-08 05:39:13 +08:00

InstallScripts.cs

feat!: genesis-pinned operator set, server identity with an encrypted control link, key-less join codes; release key continuity

2026-10-08 03:21:44 +08:00

MoShiro.Backend.Api.csproj

feat: serve the web apps from the Backend (embedded, allow-listed, no filesystem access) so passkeys bind to the panel's own domain [CI]

2026-10-08 04:09:40 +08:00

OpsEndpoints.cs

feat!: genesis-pinned operator set, server identity with an encrypted control link, key-less join codes; release key continuity

2026-10-08 03:21:44 +08:00