aboutsummaryrefslogtreecommitdiffstats
path: root/src/node.rs
Commit message (Collapse)AuthorAgeFilesLines
* auth: logging in by keytv3 days1-0/+1
| | | | | | | | POST /auth/challenge and /auth/login/key: a node-signed challenge, valid five minutes and taken once, signed with one of the user's SSH keys (ssh-keygen -Y sign -n continuum-login), for a token. Auth plan M7 (key login, M2b).
* access: the policy enforcedtv3 days1-0/+1
| | | | | | | | _continuum/access/policy ({"version": 1}) has every node screen every change it receives, on every path changes come in. A policy a node doesn't know stops its writes through the API. GET /admin/refused. Auth plan M6.
* signatures: on their own (SIGNATURES)tv3 days1-0/+1
| | | | | | | Signatures no sync message took go on their own within a second, to each peer not sent them yet (wire version bumped). Auth plan M5.
* signatures: with sync messagestv3 days1-2/+4
| | | | | | | Sync messages carry, for each actor's writes, the latest signature the sender checked; the receiver checks it once it holds the change. Auth plan M5.
* signatures: kept in the document filetv3 days1-1/+5
| | | | | | | A node's signatures are saved with its document (--document-file) and loaded with it. Auth plan M5.
* signatures: --sign-everytv3 days1-0/+6
| | | | | | | | Changes left unsigned are vouched for by the node's next signature: --sign-every 1s (default) signs the latest within a second, all signs every change, none only those that must be. Auth plan M5.
* signatures: changes signed by their nodetv3 days1-1/+3
| | | | | | | | | | Every node signs the changes it commits with its node key, an Ed25519 signature over the change's hash, kept beside the document. One signature on an actor's latest change vouches for its earlier ones. Protocol data and paths listed in _continuum/access/signed are signed, and writes with ?signed=true. Auth plan M5.
* dashboard: without LINKS; LINKS removedtv3 days1-4/+0
| | | | | | | | | The dashboard reads every member's links from the members themselves; LINKS and LINKS_REPLY, swarm::links and their wire tags go (wire version bumped). Nodes the browser can't reach are drawn from what the reachable ones measure. Auth plan M3.
* dashboard: own links over the API, and CORStv3 days1-0/+3
| | | | | | | | | GET /admin/dashboard/links/own and its event stream: a node's own links, as LINKS_REPLY carried them, for other members' dashboards with a token. CORS for the members' dashboard origins and --cors-origins, without credentials. Auth plan M3.
* auth: logging in, and tokens as bearerstv3 days1-0/+8
| | | | | | | | | POST /auth/login (by htpasswd or the proxy), /auth/refresh, /auth/logout, GET /auth/whoami; every request may bring Authorization: Bearer instead of a password. --token-lifetime and --session-lifetime. Auth plan M2.
* access: the users endpointstv3 days1-1/+1
| | | | | | | | /admin/users: list, add (one or several), remove, disable, grant and revoke capabilities; each one change, refused if it would lock its writer out. Capabilities as the store's paths name them. Auth plan M1.
* access: first users at genesistv3 days1-0/+5
| | | | | | | | --bootstrap-users gives a new swarm a registry from its first change, each first user with everything; other users may do nothing until added. Without it the swarm has no registry and works as before. Auth plan M1.
* HyParView (slim)tv5 days1-2/+7
|
* plumtreetv5 days1-1/+3
|
* dissemination traittv5 days1-0/+1
|
* topology traittv5 days1-0/+1
|
* working links recordedtv5 days1-0/+1
|
* push by defaulttv6 days1-4/+0
|
* push changes experimenttv6 days1-0/+4
|
* slow round back offtv7 days1-0/+1
|
* announce what trees misstv8 days1-0/+1
|
* add writer treestv8 days1-0/+1
|
* measure 2-hop neighbourhoodtv8 days1-0/+1
|
* add stream heartbeattv8 days1-0/+3
|
* dashboard: double-click opens peer dashboardtv8 days1-0/+3
|
* probe when reachabletv9 days1-0/+4
|
* introduce per-transport sync reply timeouttv10 days1-1/+2
|
* path probes follow keepalivetv10 days1-0/+1
|
* peer worker forget records on changetv10 days1-0/+1
|
* peer worker sleeps until deadline, not fixed timetv10 days1-0/+1
|
* bootstrap: replace pull by progress notifytv10 days1-0/+1
|
* LWW everywhere, mostlytv10 days1-0/+3
|
* state: drop epoch_txtv10 days1-2/+0
| | | | The stamp is the only lock-free epoch label.
* move all automerge references to documenttv11 days1-1/+1
|
* rename AutoMerge to Documenttv11 days1-2/+2
|
* detect local clock jumpstv11 days1-1/+1
|
* propagate clock figurestv11 days1-0/+1
|
* add peer clock skew warningtv11 days1-0/+3
|
* pong carries timetv11 days1-0/+1
|
* document: move knowledge about node to swarmtv11 days1-1/+1
|
* move change publisher to own moduletv11 days1-2/+2
|
* unify closing logictv11 days1-1/+1
|
* allow links subscriptionstv11 days1-0/+3
|
* add links messagestv12 days1-0/+1
| | | | | | | | | Introduce two new wire messages, LINKS and LINKS_REPLY (swarm::links). A member answers with its links: for each peer, the transport, whether it’s relayed, the RTT, and whether it’s dormant. It answers members only, at most every 5 s. This bumps wire::VERSION to 7. Every build answers, with or without the feature, so every node needs this patch before the map shows anything beyond its own node.
* add document lock statstv2026-10-281-1/+1
|
* move keepalive and firewall to pathstv2026-10-281-8/+7
|
* add identity layertv2026-10-271-6/+18
|
* talk about "transport" unless mycelium is meanttv2026-10-271-1/+1
|
* add Transport::delivery_limittv2026-10-271-1/+1
|
* show interpolated values in GET /admin/configtv2026-10-261-2/+2
|