eric/geth
Watch
1
0
Fork
You've already forked geth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add protected peer auth check

Browse source
This commit is contained in:
Eric Wendland 2026-05-18 17:01:50 +02:00
commit b0f208b05a
7 changed files with 347 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/roadmap.md
View file

@ -127,7 +127,7 @@ geth-to-geth connections without granting trust from discovery alone.
- No discovery result grants capabilities or trust.
- `auth explain` can distinguish "discovered" from "trusted".
- `[~]` Basic authenticated peer connection.
- `[x]` Basic authenticated peer connection.
Acceptance criteria:
- `[x]` `geth peer ping <node-id>` dials another node over Iroh using an
imported signed peer card.
@ -135,9 +135,9 @@ geth-to-geth connections without granting trust from discovery alone.
as a candidate only.
- `[x]` The ping response records negotiated ALPN and remote endpoint
identity.
- `[ ]` The remote side proves an agent/node binding before protected module
- `[x]` The remote side proves an agent/node binding before protected module
access.
- `[ ]` Protected module handlers reject requests that only know an
- `[x]` Protected module handlers reject requests that only know an
EndpointID and lack resource capabilities.
## Phase 2: Trust And Authorization