Jordan Mecom e47690c21b Enforce NIP-OA authorization time bounds (#7004) ...

NIP-OA relay admission now evaluates signed `created_at<` and
`created_at>` conditions against the already verified authentication
event timestamp. An owner-signed credential such as `created_at<1` no
longer upgrades its holder to relay membership.

The verified timestamp now flows from NIP-42, NIP-98, and Blossom
authentication through the shared membership gate used by WebSocket,
HTTP, Git, media, huddles, GIF, and workflow requests. Owner-attested
access fails closed when no signed authentication timestamp is
available. Direct relay members keep their existing admission behavior,
and `kind=` remains connection-level metadata as specified by NIP-AA.

Tests cover strict time-bound evaluation, missing timestamp rejection,
and HTTP authentication timestamp propagation.

Testing:

- `cargo test -p buzz-sdk nip_oa::tests -- --nocapture`
- `cargo test -p buzz-relay api::relay_members::tests -- --nocapture`
- `cargo test -p buzz-relay api::bridge::tests -- --nocapture`
- `just ci`

---------

Signed-off-by: Jordan Mecom <jm@squareup.com>

2026-08-31 10:18:05 -07:00

..

examples

refactor: rename sprout backend to buzz (#958)

2026-06-10 19:29:51 -04:00

src

Enforce NIP-OA authorization time bounds (#7004)

2026-08-31 10:18:05 -07:00

Cargo.toml

refactor: rename sprout backend to buzz (#958)

2026-06-10 19:29:51 -04:00