Skip to content

fix: add configurable zero-dollar proof replay protection#268

Merged
brendanjryan merged 3 commits intomainfrom
fix/proof-auth-replay-prevention
Mar 31, 2026
Merged

fix: add configurable zero-dollar proof replay protection#268
brendanjryan merged 3 commits intomainfrom
fix/proof-auth-replay-prevention

Conversation

@brendanjryan
Copy link
Copy Markdown
Collaborator

@brendanjryan brendanjryan commented Mar 31, 2026

Summary

  • add optional store-backed replay protection for zero-dollar proof credentials keyed by challenge id
  • keep proof replay prevention configurable: without an explicit store, proofs remain reusable until expiry
  • add regression coverage for both configured-store and no-store zero-dollar auth flows

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new bot commented Mar 31, 2026

Open in StackBlitz

npm i https://pkg.pr.new/mppx@268

commit: 851ac5f

@brendanjryan brendanjryan merged commit 7011418 into main Mar 31, 2026
3 of 4 checks passed
@brendanjryan brendanjryan deleted the fix/proof-auth-replay-prevention branch March 31, 2026 16:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant