b67f7dc900
fix policy to require auth and ignore all reqs before valid auth is made
2 months ago
fb65282702
develop registration ratelimit mechanism
2 months ago
ebe0012863
fix auth, read/white whitelisting and rule precedence, bump to v0.29.13
...
Policy System Verification & Testing (Latest Updates) Authentication & Security:
Verified policy system enforces authentication for all REQ and EVENT messages when enabled
Confirmed AUTH challenges are sent immediately on connection and repeated until authentication succeeds
Validated unauthenticated requests are silently rejected regardless of other policy rules
Access Control Logic:
Confirmed privileged flag only restricts read access (REQ queries), not write operations (EVENT submissions)
Validated read_allow and privileged use OR logic: users get access if EITHER they're in the allow list OR they're a party to the event (author/p-tag)
This design allows both explicit whitelisting and privacy for involved parties
Kind Whitelisting:
Verified kind filtering properly rejects unlisted events in all scenarios:
Explicit kind.whitelist: Only listed kinds accepted, even if rules exist for other kinds
Implicit whitelist (rules only): Only kinds with defined rules accepted
Blacklist mode: Blacklisted kinds rejected, others require rules
Added comprehensive test suite (10 scenarios) covering edge cases and real-world configurations
2 months ago
917bcf0348
fix policy to ignore all req/events without auth
2 months ago
55add34ac1
add rely-sqlite to benchmark
2 months ago
00a6a78a41
fix cache to disregard subscription ids
2 months ago
1b279087a9
add vertexes between npubs and events, use for p tags
2 months ago
b7417ab5eb
create new index that records the links between pubkeys, events, kinds, and inbound/outbound/author
2 months ago
d4e2f48b7e
bump to v0.29.10
2 months ago
a79beee179
fixed and unified privilege checks across ACLs
2 months ago
f89f41b8c4
full benchmark run
2 months ago
be6cd8c740
fixed error comparing hex/binary in pubkey white/blacklist, complete neo4j and tests"
2 months ago
8b3d03da2c
fix workflow setup
2 months ago
5bcb8d7f52
upgrade to gitea workflows
2 months ago
b3b963ecf5
replace github workflows with gitea
2 months ago
d4fb6cbf49
fix handleevents not prompting auth for event publish with auth-required
2 months ago
d5c0e3abfc
bump to v0.29.3
2 months ago
1d4d877a10
fix auth-required not sending immediate challenge, benchmark leak
2 months ago
038d1959ed
add dgraph backend to benchmark suite with safe type assertions for multi-backend support
2 months ago
86481a42e8
initial draft of neo4j database driver
2 months ago
beed174e83
make query cache normalize filters so same query different order filters are cache hits
2 months ago
511b8cae5f
improve query cache with zstd level 9
2 months ago
dfe8b5f8b2
add a filter query cache 512mb that stores already decoded recent query results
...
this should improve performance noticeably for typical kind 1 client queries
2 months ago
95bcf85ad7
optimizing badger cache, won a 10-15% improvement in most benchmarks
2 months ago
9bb3a7e057
totally off topic little document about ion drives
2 months ago
a608c06138
draft spec for integrating dgraph
2 months ago
bf8d912063
enhance spider with rate limit handling, follow list updates, and improved reconnect logic; bump version to v0.29.0
...
also reduces CPU load for spider, and minor CORS fixes
2 months ago
24eef5b5a8
fix CORS headers and a wasm experiment
2 months ago
9fb976703d
hello world in wat
2 months ago
1d9a6903b8
bump version
2 months ago
29e175efb0
implement event table subtyping for small events in value log
2 months ago
7169a2158f
when in "none" ACL mode, privileged checks are not enforced
2 months ago
baede6d37f
extend script test to two read two write to ensure script continues running
2 months ago
3e7cc01d27
make script stderr print into relay logs
2 months ago
cc99fcfab5
bump to v0.27.5
2 months ago
b2056b6636
bump to v0.27.5
2 months ago
108cbdce93
fix docker image cleanups in test
2 months ago
e9fb314496
fully test and verify policy script functionality
2 months ago
597711350a
fix script startup and validate with tests
2 months ago
7113848de8
fix error handling of default policy script
2 months ago
54606c6318
curl|bash deploy script
2 months ago
09bcbac20d
create concurrent script runner per rule script
...
bump to v0.27.1
2 months ago
84b7c0e11c
bump to v0.27.0
2 months ago
d0dbd2e2dc
implemented and tested NIP-43 invite based ACL
2 months ago
f0beb83ceb
fix utf8 handling bug, bump to v0.26.4
2 months ago
5d04193bb7
implement messages and operations for FIND
2 months ago
b4760c49b6
implement messages and operations for FIND
2 months ago
587116afa8
add noise protocol security and site certificate third party signing
2 months ago
960bfe7dda
add noise protocol security and site certificate third party signing
2 months ago
f5cfcff6c9
draft name registry proposal
2 months ago
mleku