aboutsummaryrefslogtreecommitdiffstats
path: root/src/node.rs
Commit message (Collapse)AuthorAgeFilesLines
* auth: logging in by keytv6 days1-0/+1
| | | | | | | | POST /auth/challenge and /auth/login/key: a node-signed challenge, valid five minutes and taken once, signed with one of the user's SSH keys (ssh-keygen -Y sign -n continuum-login), for a token. Auth plan M7 (key login, M2b).
* access: the policy enforcedtv6 days1-0/+1
| | | | | | | | _continuum/access/policy ({"version": 1}) has every node screen every change it receives, on every path changes come in. A policy a node doesn't know stops its writes through the API. GET /admin/refused. Auth plan M6.
* signatures: on their own (SIGNATURES)tv6 days1-0/+1
| | | | | | | Signatures no sync message took go on their own within a second, to each peer not sent them yet (wire version bumped). Auth plan M5.
* signatures: with sync messagestv6 days1-2/+4
| | | | | | | Sync messages carry, for each actor's writes, the latest signature the sender checked; the receiver checks it once it holds the change. Auth plan M5.
* signatures: kept in the document filetv6 days1-1/+5
| | | | | | | A node's signatures are saved with its document (--document-file) and loaded with it. Auth plan M5.
* signatures: --sign-everytv6 days1-0/+6
| | | | | | | | Changes left unsigned are vouched for by the node's next signature: --sign-every 1s (default) signs the latest within a second, all signs every change, none only those that must be. Auth plan M5.
* signatures: changes signed by their nodetv6 days1-1/+3
| | | | | | | | | | Every node signs the changes it commits with its node key, an Ed25519 signature over the change's hash, kept beside the document. One signature on an actor's latest change vouches for its earlier ones. Protocol data and paths listed in _continuum/access/signed are signed, and writes with ?signed=true. Auth plan M5.
* dashboard: without LINKS; LINKS removedtv6 days1-4/+0
| | | | | | | | | The dashboard reads every member's links from the members themselves; LINKS and LINKS_REPLY, swarm::links and their wire tags go (wire version bumped). Nodes the browser can't reach are drawn from what the reachable ones measure. Auth plan M3.
* dashboard: own links over the API, and CORStv6 days1-0/+3
| | | | | | | | | GET /admin/dashboard/links/own and its event stream: a node's own links, as LINKS_REPLY carried them, for other members' dashboards with a token. CORS for the members' dashboard origins and --cors-origins, without credentials. Auth plan M3.
* auth: logging in, and tokens as bearerstv6 days1-0/+8
| | | | | | | | | POST /auth/login (by htpasswd or the proxy), /auth/refresh, /auth/logout, GET /auth/whoami; every request may bring Authorization: Bearer instead of a password. --token-lifetime and --session-lifetime. Auth plan M2.
* access: the users endpointstv6 days1-1/+1
| | | | | | | | /admin/users: list, add (one or several), remove, disable, grant and revoke capabilities; each one change, refused if it would lock its writer out. Capabilities as the store's paths name them. Auth plan M1.
* access: first users at genesistv6 days1-0/+5
| | | | | | | | --bootstrap-users gives a new swarm a registry from its first change, each first user with everything; other users may do nothing until added. Without it the swarm has no registry and works as before. Auth plan M1.
* HyParView (slim)tv7 days1-2/+7
|
* plumtreetv7 days1-1/+3
|
* dissemination traittv7 days1-0/+1
|
* topology traittv7 days1-0/+1
|
* working links recordedtv7 days1-0/+1
|
* push by defaulttv8 days1-4/+0
|
* push changes experimenttv8 days1-0/+4
|
* slow round back offtv9 days1-0/+1
|
* announce what trees misstv10 days1-0/+1
|
* add writer treestv10 days1-0/+1
|
* measure 2-hop neighbourhoodtv10 days1-0/+1
|
* add stream heartbeattv10 days1-0/+3
|
* dashboard: double-click opens peer dashboardtv11 days1-0/+3
|
* probe when reachabletv12 days1-0/+4
|
* introduce per-transport sync reply timeouttv12 days1-1/+2
|
* path probes follow keepalivetv12 days1-0/+1
|
* peer worker forget records on changetv12 days1-0/+1
|
* peer worker sleeps until deadline, not fixed timetv12 days1-0/+1
|
* bootstrap: replace pull by progress notifytv12 days1-0/+1
|
* LWW everywhere, mostlytv12 days1-0/+3
|
* state: drop epoch_txtv12 days1-2/+0
| | | | The stamp is the only lock-free epoch label.
* move all automerge references to documenttv13 days1-1/+1
|
* rename AutoMerge to Documenttv13 days1-2/+2
|
* detect local clock jumpstv13 days1-1/+1
|
* propagate clock figurestv13 days1-0/+1
|
* add peer clock skew warningtv13 days1-0/+3
|
* pong carries timetv13 days1-0/+1
|
* document: move knowledge about node to swarmtv13 days1-1/+1
|
* move change publisher to own moduletv13 days1-2/+2
|
* unify closing logictv13 days1-1/+1
|
* allow links subscriptionstv14 days1-0/+3
|
* add links messagestv14 days1-0/+1
| | | | | | | | | Introduce two new wire messages, LINKS and LINKS_REPLY (swarm::links). A member answers with its links: for each peer, the transport, whether it’s relayed, the RTT, and whether it’s dormant. It answers members only, at most every 5 s. This bumps wire::VERSION to 7. Every build answers, with or without the feature, so every node needs this patch before the map shows anything beyond its own node.
* add document lock statstv2026-10-281-1/+1
|
* move keepalive and firewall to pathstv2026-10-281-8/+7
|
* add identity layertv2026-10-271-6/+18
|
* talk about "transport" unless mycelium is meanttv2026-10-271-1/+1
|
* add Transport::delivery_limittv2026-10-271-1/+1
|
* show interpolated values in GET /admin/configtv2026-10-261-2/+2
|
generated by cgit v1.3.1 (git 2.54.0) at 2026-11-13 10:53:36 +0000