a03af8e05a
self-detection elides self url at startup, handles multiple DNS pointers
2 months ago
1522bfab2e
add relay self-connection via authed pubkey
2 months ago
a457d22baf
update go.yml workflow
2 months ago
2b8f359a83
fix workflow to fetch libsecp256k1.so
2 months ago
2e865c9616
fix workflow to fetch libsecp256k1.so
2 months ago
7fe1154391
fix policy load failure to panic, remove fallback case
2 months ago
6e4f24329e
fix silent fail of loading policy with panic, and bogus fallback logic
2 months ago
da058c37c0
blossom works fully correctly
2 months ago
1c376e6e8d
migrate to new nostr library
2 months ago
86cf8b2e35
unignore files that should be there
2 months ago
ef51382760
optimize e and p tags
2 months ago
5c12c467b7
some more gitea
2 months ago
76e9166a04
fix paths
2 months ago
350b4eb393
gitea
2 months ago
b67f7dc900
fix policy to require auth and ignore all reqs before valid auth is made
2 months ago
fb65282702
develop registration ratelimit mechanism
2 months ago
ebe0012863
fix auth, read/white whitelisting and rule precedence, bump to v0.29.13
...
Policy System Verification & Testing (Latest Updates) Authentication & Security:
Verified policy system enforces authentication for all REQ and EVENT messages when enabled
Confirmed AUTH challenges are sent immediately on connection and repeated until authentication succeeds
Validated unauthenticated requests are silently rejected regardless of other policy rules
Access Control Logic:
Confirmed privileged flag only restricts read access (REQ queries), not write operations (EVENT submissions)
Validated read_allow and privileged use OR logic: users get access if EITHER they're in the allow list OR they're a party to the event (author/p-tag)
This design allows both explicit whitelisting and privacy for involved parties
Kind Whitelisting:
Verified kind filtering properly rejects unlisted events in all scenarios:
Explicit kind.whitelist: Only listed kinds accepted, even if rules exist for other kinds
Implicit whitelist (rules only): Only kinds with defined rules accepted
Blacklist mode: Blacklisted kinds rejected, others require rules
Added comprehensive test suite (10 scenarios) covering edge cases and real-world configurations
2 months ago
917bcf0348
fix policy to ignore all req/events without auth
2 months ago
55add34ac1
add rely-sqlite to benchmark
2 months ago
00a6a78a41
fix cache to disregard subscription ids
2 months ago
1b279087a9
add vertexes between npubs and events, use for p tags
2 months ago
b7417ab5eb
create new index that records the links between pubkeys, events, kinds, and inbound/outbound/author
2 months ago
d4e2f48b7e
bump to v0.29.10
2 months ago
a79beee179
fixed and unified privilege checks across ACLs
2 months ago
f89f41b8c4
full benchmark run
2 months ago
be6cd8c740
fixed error comparing hex/binary in pubkey white/blacklist, complete neo4j and tests"
2 months ago
8b3d03da2c
fix workflow setup
2 months ago
5bcb8d7f52
upgrade to gitea workflows
2 months ago
b3b963ecf5
replace github workflows with gitea
2 months ago
d4fb6cbf49
fix handleevents not prompting auth for event publish with auth-required
2 months ago
d5c0e3abfc
bump to v0.29.3
2 months ago
1d4d877a10
fix auth-required not sending immediate challenge, benchmark leak
2 months ago
038d1959ed
add dgraph backend to benchmark suite with safe type assertions for multi-backend support
2 months ago
86481a42e8
initial draft of neo4j database driver
2 months ago
beed174e83
make query cache normalize filters so same query different order filters are cache hits
2 months ago
511b8cae5f
improve query cache with zstd level 9
2 months ago
dfe8b5f8b2
add a filter query cache 512mb that stores already decoded recent query results
...
this should improve performance noticeably for typical kind 1 client queries
2 months ago
95bcf85ad7
optimizing badger cache, won a 10-15% improvement in most benchmarks
2 months ago
9bb3a7e057
totally off topic little document about ion drives
2 months ago
a608c06138
draft spec for integrating dgraph
2 months ago
bf8d912063
enhance spider with rate limit handling, follow list updates, and improved reconnect logic; bump version to v0.29.0
...
also reduces CPU load for spider, and minor CORS fixes
2 months ago
24eef5b5a8
fix CORS headers and a wasm experiment
2 months ago
9fb976703d
hello world in wat
2 months ago
1d9a6903b8
bump version
2 months ago
29e175efb0
implement event table subtyping for small events in value log
2 months ago
7169a2158f
when in "none" ACL mode, privileged checks are not enforced
2 months ago
baede6d37f
extend script test to two read two write to ensure script continues running
2 months ago
3e7cc01d27
make script stderr print into relay logs
2 months ago
cc99fcfab5
bump to v0.27.5
2 months ago
b2056b6636
bump to v0.27.5
2 months ago
mleku