Duncan e5736b8ff0 fix(buzz-auth): close SSRF/redirect bypass in HttpJwksFetcher; trim internal markers ...

- Remove with_client() bypass: HttpJwksFetcher is now a unit struct;
  each fetch_jwks call builds a dedicated per-request pinned client.
- Add resolve_and_check_ssrf: DNS-resolves host:port via spawn_blocking,
  rejects any resolved private/reserved IP (closes DNS-rebinding TOCTOU).
- Per-request client enforces: redirect(Policy::none()), no_proxy(),
  .resolve(host, pinned_ip), and timeout(JWKS_REQUEST_TIMEOUT_SECS).
- Drop unused client field (dead_code warning) now that no shared pool
  is needed.
- Remove pure-paraphrase doc on IssuerRegistry::all_policies(); replace
  with doc stating constraint (unspecified order, startup use).
- Remove all 'PR N' internal markers from doc comments; replace with
  production-stable references to the jwks runtime.

Co-authored-by: Cea Stapleton Cordasco <261786559+cea@users.noreply.github.com>
Co-authored-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Will Pfleger <pfleger.will@gmail.com>

2026-08-31 16:26:53 -04:00

..

src

fix(buzz-auth): close SSRF/redirect bypass in HttpJwksFetcher; trim internal markers

2026-08-31 16:26:53 -04:00

Cargo.toml

fix(auth): harden JWKS boundary, reject current-status, fix generation and comment quality

2026-08-31 16:26:53 -04:00