mirrors/arti.git - mirror of https://gitlab.torproject.org/tpo/core/arti

	Commit message (Collapse)	Author	Age	Files	Lines
*	rpcserver: Remove stale TODO about authentication	Nick Mathewson	2025-01-28	1	-3/+0
\| \| \| \|	(This TODO dates back to the point before we had sessions.)
*	rpcserver: Improve conversion of authentication error.	Nick Mathewson	2025-01-28	1	-7/+0
\|
*	rpc: More documentation on cookie_continue.	Nick Mathewson	2025-01-15	1	-0/+5
\|
*	rpc: Clarify auth-repetition rules.	Nick Mathewson	2025-01-15	1	-2/+5
\|
*	rpc: Document cookie messages a little more.	Nick Mathewson	2025-01-15	1	-1/+14
\|
*	rpc: Refactor Cookie and UnloadedCookie into a single type.	Nick Mathewson	2025-01-15	1	-1/+10
\|
*	rpc: consolodate naming of "inherent" auth.	Nick Mathewson	2025-01-15	1	-5/+9
\| \| \| \| \| \| \| \| \|	We don't want to call this "unix path" anywhere, since it corresponds to _any_ case where the ability to negotiate a successful connection means that the client is authorized. We also don't want to call it "none": The authentication is inherent to the connection, not nonexistent.
*	rpc: Tweak cookie protocol to bind both nonces.	Nick Mathewson	2025-01-15	1	-4/+9
\| \| \| \| \| \| \| \| \| \|	Previously participants in the cookie protocol only bound the peer nonce in their MACs. With this change, they bind both nonces. This change is _probably_ not necessary for security, but it can't hurt. It follows a general principle that Adam Langley told me a long time ago: you won't regret binding more, but you might regret binding less.
*	rpc: Keep Cookie in an Arc.	Nick Mathewson	2025-01-15	1	-2/+2
\| \| \| \| \|	Since this is a secret value, it's probably best not to copy it all over the place.
*	arti-rpcserver: Server side of cookie auth.	Nick Mathewson	2025-01-15	2	-8/+172
\|
*	arti-rpcserver: Tell connections what kind of auth to expect.	Nick Mathewson	2025-01-15	1	-5/+7
\|
*	arti-rpcserver: move inherent authentication to its own module.	Nick Mathewson	2025-01-15	1	-0/+77