Jason Woltje
004f7828fb
Add CapabilityGuard infrastructure to enforce capability-based authorization on federation endpoints. Implements fail-closed security model. Security properties: - Deny by default (no capability = deny) - Only explicit true values grant access - Connection must exist and be ACTIVE - All denials logged for audit trail Implementation: - Created CapabilityGuard with fail-closed authorization logic - Added @RequireCapability decorator for marking endpoints - Added getConnectionById() to ConnectionService - Added logCapabilityDenied() to AuditService - 12 comprehensive tests covering all security scenarios Quality gates: - ✅ Tests: 12/12 passing - ✅ Lint: 0 new errors (33 pre-existing) - ✅ TypeScript: 0 new errors (8 pre-existing) Refs #273 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
21 lines
654 B
TypeScript
21 lines
654 B
TypeScript
/**
|
|
* Federation Module Exports
|
|
*/
|
|
|
|
export * from "./federation.module";
|
|
export * from "./federation.service";
|
|
export * from "./federation.controller";
|
|
export * from "./identity-linking.service";
|
|
export * from "./identity-resolution.service";
|
|
export * from "./identity-linking.controller";
|
|
export * from "./crypto.service";
|
|
export * from "./audit.service";
|
|
export * from "./query.service";
|
|
export * from "./query.controller";
|
|
export * from "./command.service";
|
|
export * from "./command.controller";
|
|
export * from "./guards";
|
|
export * from "./types/instance.types";
|
|
export * from "./types/identity-linking.types";
|
|
export * from "./types/message.types";
|