Repository navigation
Verify signed device licence allowances and terminal replies - #1240
Merged
Merged
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
enaboapps
marked this pull request as ready for review
October 31, 2026 13:41
This was referenced Oct 31, 2026
enaboapps
force-pushed
the
feat/1238-licence-lease-verifier
branch
from
October 31, 2026 14:16
b050438 to
688e220
Compare
enaboapps
force-pushed
the
feat/1238-licence-lease-verifier
branch
from
October 31, 2026 15:01
688e220 to
0c4cc99
Compare
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds a separate trust domain for SWPL1 device allowances and SWPS1 terminal replies. Verifies exact signed bytes, device identity, generation, expiry, and request nonce/action/freshness. Rejects purchase/lease signer overlap and allowances longer than 30 days. Public fixtures match switchify-supabase#19 byte-for-byte.
Closes #1238. Foundation for #1239; this PR does not change app access behaviour or launch the app.
Validation on Node 24/Rust 1.97.1: prediction-model, lint, npm test (320 UI + 21 Node), npm build, cargo fmt check, clippy all-targets -D warnings, cargo test (859 unit + 9 config pass, 4 existing ignored). Three new Rust tests cover cross-language fixtures, expiry and negative verification. No production keys or secrets in tests; fixture signing seeds are explicitly public test material.
CI prerequisite: stacked on #1243 (supported macOS runner), then #1241 builds on this verifier. Rebased head 688e220 has an identical scoped patch to reviewed b050438; independent review found no issues on the new head.