Skip to content

Merge develop into production — peers audit-fix sprint (50+ findings …#135

Open
ParkerM2 wants to merge 11 commits intomasterfrom
production
Open

Merge develop into production — peers audit-fix sprint (50+ findings …#135
ParkerM2 wants to merge 11 commits intomasterfrom
production

Conversation

@ParkerM2
Copy link
Copy Markdown
Owner

…closed)

What

Why

Changes

Testing

  • npm run lint passes clean
  • npm run typecheck passes clean
  • npm run build succeeds
  • Manually tested in dev (npm run dev)

Screenshots

ParkerES added 11 commits April 27, 2026 09:09
…with rejectUnauthorized:false

Self-signed peer certs cannot be CA-validated, so rejectUnauthorized:true causes
Node to reject the handshake before checkServerIdentity runs. Switch back to
rejectUnauthorized:false in both peer client paths (peer-http postJsonPinned and
ws-transport.dial); pinnedCheckServerIdentity still enforces the fingerprint at
TLS time and fails the handshake on mismatch.

Also isolate peer-identity tests from CI's ADC_PEERS_ALLOW_PLAINTEXT_IDENTITY env
var so the throw-on-unavailable assertions remain meaningful.
…dentity Error when rejectUnauthorized:false); pair-flow waits for connection AFTER pairing populates peerStores
…(notifyDisconnected); was stuck in 'open' state on auth-fail close
…n post-handshake, dialer notifyDisconnected, pair-flow ordering)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants