fix(federation): security hardening — OID verification, atomic activation, audit on failure #501

Merged
jason.woltje merged 2 commits from fix/federation-m2-security into main 2026-04-22 06:02:53 +00:00
Showing only changes of commit 9b718d3e06 - Show all commits

View File

@@ -256,8 +256,8 @@ export class EnrollmentService {
.insert(federationAuditLog)
.values({
requestId: crypto.randomUUID(),
peerId: row?.peerId ?? 'unknown',
grantId: row?.grantId ?? 'unknown',
peerId: row?.peerId ?? null,
grantId: row?.grantId ?? null,
verb: 'enrollment',
resource: 'federation_grant',
statusCode: