summaryrefslogtreecommitdiff
path: root/crates/arti-rpcserver/src/connection/auth
Commit message (Collapse)AuthorAgeFilesLines
* rpc: Do not allow a connection to be authenticated twiceNick Mathewson2026-03-162-2/+2
| | | | This makes it a little easier to drop unwanted capabilities.
* rpc: Move responsibility for Session creation to ConnectionNick Mathewson2026-03-162-12/+8
| | | | | The Connection will know the options that the listener was created with, as opposed to RpcMgr, which is the same for every listener.
* Switch Cargo.toml files to edition 2024.Nick Mathewson2025-08-071-1/+1
| | | | | | | | | | | | | | First, run ``` git grep -l "^edition =" | xargs perl -i -pe 's/^edition *=.*/edition = "2024"/;' ``` Second, manually verify that all Cargo.toml files have changed, and nothing else has changed. Third, run cargo fmt again.
* squash! Upgrade rand dependency to 0.9.Nick Mathewson2025-03-181-1/+1
| | | | - `rand::thread_rng()` has been deprecated and renamed to `rand::rng()`
* rpcserver: Remove stale TODO about authenticationNick Mathewson2025-01-281-3/+0
| | | | (This TODO dates back to the point before we had sessions.)
* rpcserver: Improve conversion of authentication error.Nick Mathewson2025-01-281-7/+0
|
* rpc: More documentation on cookie_continue.Nick Mathewson2025-01-151-0/+5
|
* rpc: Clarify auth-repetition rules.Nick Mathewson2025-01-151-2/+5
|
* rpc: Document cookie messages a little more.Nick Mathewson2025-01-151-1/+14
|
* rpc: Refactor Cookie and UnloadedCookie into a single type.Nick Mathewson2025-01-151-1/+10
|
* rpc: consolodate naming of "inherent" auth.Nick Mathewson2025-01-151-5/+9
| | | | | | | | | We don't want to call this "unix path" anywhere, since it corresponds to _any_ case where the ability to negotiate a successful connection means that the client is authorized. We also don't want to call it "none": The authentication is inherent to the connection, not nonexistent.
* rpc: Tweak cookie protocol to bind both nonces.Nick Mathewson2025-01-151-4/+9
| | | | | | | | | | Previously participants in the cookie protocol only bound the peer nonce in their MACs. With this change, they bind both nonces. This change is _probably_ not necessary for security, but it can't hurt. It follows a general principle that Adam Langley told me a long time ago: you won't regret binding more, but you might regret binding less.
* rpc: Keep Cookie in an Arc.Nick Mathewson2025-01-151-2/+2
| | | | | Since this is a secret value, it's probably best not to copy it all over the place.
* arti-rpcserver: Server side of cookie auth.Nick Mathewson2025-01-152-8/+172
|
* arti-rpcserver: Tell connections what kind of auth to expect.Nick Mathewson2025-01-151-5/+7
|
* arti-rpcserver: move inherent authentication to its own module.Nick Mathewson2025-01-151-0/+77