yyj-xydt 429bf9383e fix(workboard): avoid timing leaks in claim authorization (#104259) ...

* test(workboard): cover claim token lifecycle auth

* fix(workboard): compare claim tokens safely

Co-authored-by: 0668001099 <yang.yujie1@xydigit.com>

* refactor(workboard): centralize claim identity checks

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-07-13 22:12:45 -07:00

..

card-lookup.ts

refactor(workboard): localize private store types (#100989)

2026-07-06 09:01:01 -07:00

cli.test.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

cli.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

command.test.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

command.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

dispatcher-workspace.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

dispatcher.test.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

dispatcher.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

gateway-helpers.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

gateway-workspace-methods.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

gateway.test.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

gateway.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

persistence-types.ts

docs: document small extension sources

2026-06-04 21:02:07 -04:00

sqlite-store-policy.test.ts

fix(workboard): refuse unsafe SSHFS SQLite storage

2026-06-16 04:34:14 +02:00

sqlite-store.ts

refactor(workboard): localize private store types (#100989)

2026-07-06 09:01:01 -07:00

store-automation.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

store-card-helpers.ts

fix(workboard): avoid timing leaks in claim authorization (#104259)

2026-07-13 22:12:45 -07:00

store-constants.ts

refactor(workboard): split store implementation (#106306)

2026-07-13 05:24:49 -07:00

store-core.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

store-enrichment.ts

refactor(workboard): split store implementation (#106306)

2026-07-13 05:24:49 -07:00

store-inputs.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

store-normalizers.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

store-notifications.ts

refactor(workboard): split store implementation (#106306)

2026-07-13 05:24:49 -07:00

store-promote.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

store-workflow.ts

fix(workboard): avoid timing leaks in claim authorization (#104259)

2026-07-13 22:12:45 -07:00

store.test.ts

fix(workboard): avoid timing leaks in claim authorization (#104259)

2026-07-13 22:12:45 -07:00

store.ts

refactor(workboard): split store implementation (#106306)

2026-07-13 05:24:49 -07:00

tools.test.ts

fix(workboard): avoid timing leaks in claim authorization (#104259)

2026-07-13 22:12:45 -07:00

tools.ts

fix(workboard): avoid timing leaks in claim authorization (#104259)

2026-07-13 22:12:45 -07:00

types.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

workspace-access.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00

workspace-path.ts

fix(workboard): keep dispatch inside caller workspace authority (#107087)

2026-07-13 21:36:26 -07:00