let5see/clawdbot
1
0
Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity

fix: validate ws tls fingerprint

Browse Source
This commit is contained in:
Peter Steinberger
2026-01-20 12:31:09 +00:00
parent 06c17a333e
commit dcb8d16591
5 changed files with 227 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/refactor/clawnet.md
View File

@@ -296,8 +296,8 @@ Same `deviceId` across roles → single “Instance” row:
- [x] **TLS pinning for WS:** reuse bridge TLS runtime; discovery advertises fingerprint; client validation.
- [x] **Discovery + allowlist:** WS discovery TXT includes TLS fingerprint + role hints; node commands filtered by server allowlist.
- [x] **Presence unification:** dedupe deviceId across roles; include role/scope metadata; “single instance row”.
- [ ] **Docs + examples:** protocol doc, CLI docs, onboarding + security notes; no personal hostnames.
- [ ] **Test coverage:** connect auth paths, rotation/revoke, approvals, TLS fingerprint mismatch, presence.
- [x] **Docs + examples:** protocol doc, CLI docs, onboarding + security notes; no personal hostnames.
- [x] **Test coverage:** connect auth paths, rotation/revoke, approvals, TLS fingerprint mismatch, presence.
Process per item:
- Do implementation.