mirrors/arti.git/crates/arti-rpcserver/src/connection/auth, branch arti-v1.8.0 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.8.0 2025-08-07T15:28:36Z Switch Cargo.toml files to edition 2024. 2025-08-07T15:28:36Z Nick Mathewson nickm@torproject.org 2025-08-06T01:19:58Z urn:sha1:77b0de43b8c67cdb81befe0680a3df43b6ad37bc First, run ``` git grep -l "^edition =" | xargs perl -i -pe 's/^edition *=.*/edition = "2024"/;' ``` Second, manually verify that all Cargo.toml files have changed, and nothing else has changed. Third, run cargo fmt again. squash! Upgrade rand dependency to 0.9. 2025-03-18T16:09:44Z Nick Mathewson nickm@torproject.org 2025-03-18T13:01:31Z urn:sha1:2f8993c22c2b86010e4fd8b5169ef0ab83f8c754 - `rand::thread_rng()` has been deprecated and renamed to `rand::rng()` rpcserver: Remove stale TODO about authentication 2025-01-28T19:50:22Z Nick Mathewson nickm@torproject.org 2025-01-28T19:50:22Z urn:sha1:46b7be36420cd151aaf6ea32335cfd578604a9a5 (This TODO dates back to the point before we had sessions.) rpcserver: Improve conversion of authentication error. 2025-01-28T19:29:15Z Nick Mathewson nickm@torproject.org 2025-01-28T19:29:15Z urn:sha1:dc29f9cbfc8e03a6ed1c32d6c079fa8b0d48f623 rpc: More documentation on cookie_continue. 2025-01-15T20:13:39Z Nick Mathewson nickm@torproject.org 2025-01-15T20:13:39Z urn:sha1:d6acbeadba6ffcff6fde00fc488abf5a8c652e24 rpc: Clarify auth-repetition rules. 2025-01-15T14:18:44Z Nick Mathewson nickm@torproject.org 2025-01-15T14:09:31Z urn:sha1:bdbddedea0a5b8158e57e41ce141bc4424186f89 rpc: Document cookie messages a little more. 2025-01-15T14:18:44Z Nick Mathewson nickm@torproject.org 2025-01-15T14:04:46Z urn:sha1:f2398569b460bf965dbaac5e7546a2125a9f5a14 rpc: Refactor Cookie and UnloadedCookie into a single type. 2025-01-15T14:18:44Z Nick Mathewson nickm@torproject.org 2025-01-15T13:39:23Z urn:sha1:6e0f70d08f437bd593f5e564594dd8a44036c72c rpc: consolodate naming of "inherent" auth. 2025-01-15T14:18:44Z Nick Mathewson nickm@torproject.org 2025-01-09T21:15:51Z urn:sha1:c6445825bc933a248c1b0b11f0baef43f4182de6 We don't want to call this "unix path" anywhere, since it corresponds to _any_ case where the ability to negotiate a successful connection means that the client is authorized. We also don't want to call it "none": The authentication is inherent to the connection, not nonexistent. rpc: Tweak cookie protocol to bind both nonces. 2025-01-15T14:18:44Z Nick Mathewson nickm@torproject.org 2025-01-09T19:55:50Z urn:sha1:f3fcd71f218595402175c2530a09dabb7ed10f9d Previously participants in the cookie protocol only bound the peer nonce in their MACs. With this change, they bind both nonces. This change is _probably_ not necessary for security, but it can't hurt. It follows a general principle that Adam Langley told me a long time ago: you won't regret binding more, but you might regret binding less.