mosaicstack/stack
1
0
Fork 0
Code Issues 19 Pull Requests Actions Packages Projects Releases 13 Wiki Activity

fix(federation): security hardening — OID verification, atomic activation, audit on failure #501

Merged
jason.woltje merged 2 commits from fix/federation-m2-security into main 2026-04-22 06:02:53 +00:00
Conversation 0 Commits 2 Files Changed 2 +2 -2
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 9b718d3e06 - Show all commits

4
apps/gateway/src/federation/enrollment.service.ts
View File

@@ -256,8 +256,8 @@ export class EnrollmentService {
.insert(federationAuditLog) .insert(federationAuditLog)
.values({ .values({
requestId: crypto.randomUUID(), requestId: crypto.randomUUID(),
peerId: row?.peerId ?? 'unknown', peerId: row?.peerId ?? null,
grantId: row?.grantId ?? 'unknown', grantId: row?.grantId ?? null,
verb: 'enrollment', verb: 'enrollment',
resource: 'federation_grant', resource: 'federation_grant',
statusCode: statusCode: