feat(relay): implement NIP-AA agent authentication via NIP-OA credentials by tlongwell-block · Pull Request #468 · block/buzz

feat(relay): implement NIP-AA agent authentication across all ingress points

tlongwell-block

committed

fix(relay): enforce exactly-one auth tag on all NIP-AA ingress points

tlongwell-block

committed

fix(relay): add dedicated NIP-AA auth path for token-required relays

tlongwell-block

committed

polish(relay): NIP-AA doc comments, audit logging, and test coverage

tlongwell-block

committed

fix(relay): prevent direct members from bypassing token requirements via NIP-AA path

tlongwell-block

committed

fix(relay): restrict NIP-AA virtual member scopes and reject multiple auth tags

tlongwell-block

committed

nip-aa: fix admin scope retention, add lowercase hex validation, document re-auth deviation

tlongwell-block

committed

nip-aa: restrict NIP-AA to WS NIP-42 path only; fix scope intersection

tlongwell-block

committed

nip-aa: sanitize DB errors, remove unused MediaError variant, document API contract

tlongwell-block

committed

nip-aa: block gift-wrap exception for virtual members; fix event.rs pubkey check

tlongwell-block

committed

nip-aa: remove NIP-AA from REST membership helper; fix error prefixes; audio uses nip_aa directly

tlongwell-block

committed

nip-aa: fix audio virtual member gate bug; fix comment mismatch

tlongwell-block

committed

fix: NIP-AA issues — re-auth, scope intersection, DB fail-closed, relay_members cleanup

tlongwell-block

committed

nip-aa: implement NIP-AA §6 re-auth; fix scope empty-intersection; fail-closed DB errors

tlongwell-block

committed

nip-aa: audio handler refactor — persist owner_pubkey, deduplicate membership check

tlongwell-block

committed

nip-aa: fix re-auth state poisoning, close on malformed AUTH, expand test coverage

tlongwell-block

committed

nip-aa: robust malformed AUTH detection, document limitations, expand test docs

tlongwell-block

committed

nip-aa: robust malformed AUTH for broken JSON, persist owner_pubkey in audio+ConnectionManager

tlongwell-block

committed

nip-aa: fix malformed AUTH heuristic, deduplicate audio handler, fix fail-open DB bug

tlongwell-block

committed

nip-aa: allow different-pubkey re-auth (single-pubkey-at-a-time model)

tlongwell-block

committed

nip-aa: add unit tests for scope intersection, owner tracking, auth state

tlongwell-block

committed

nip-aa: persist owner_pubkey in audio sessions, doc improvements, clippy fix

tlongwell-block

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(relay): implement NIP-AA agent authentication via NIP-OA credentials#468

feat(relay): implement NIP-AA agent authentication via NIP-OA credentials#468
tlongwell-block wants to merge 33 commits into
mainfrom
feat/nip-aa-implementation

Commits on May 3, 2026

feat(relay): implement NIP-AA agent authentication across all ingress points

fix(relay): enforce exactly-one auth tag on all NIP-AA ingress points

fix(relay): add dedicated NIP-AA auth path for token-required relays

polish(relay): NIP-AA doc comments, audit logging, and test coverage

fix(relay): prevent direct members from bypassing token requirements via NIP-AA path

fix(relay): restrict NIP-AA virtual member scopes and reject multiple auth tags

nip-aa: fix admin scope retention, add lowercase hex validation, document re-auth deviation

nip-aa: restrict NIP-AA to WS NIP-42 path only; fix scope intersection

nip-aa: sanitize DB errors, remove unused MediaError variant, document API contract

nip-aa: block gift-wrap exception for virtual members; fix event.rs pubkey check

nip-aa: remove NIP-AA from REST membership helper; fix error prefixes; audio uses nip_aa directly

nip-aa: fix audio virtual member gate bug; fix comment mismatch

fix: NIP-AA issues — re-auth, scope intersection, DB fail-closed, relay_members cleanup

nip-aa: implement NIP-AA §6 re-auth; fix scope empty-intersection; fail-closed DB errors

nip-aa: audio handler refactor — persist owner_pubkey, deduplicate membership check

nip-aa: fix re-auth state poisoning, close on malformed AUTH, expand test coverage

nip-aa: robust malformed AUTH detection, document limitations, expand test docs

nip-aa: robust malformed AUTH for broken JSON, persist owner_pubkey in audio+ConnectionManager

nip-aa: fix malformed AUTH heuristic, deduplicate audio handler, fix fail-open DB bug

nip-aa: allow different-pubkey re-auth (single-pubkey-at-a-time model)

nip-aa: add unit tests for scope intersection, owner tracking, auth state

nip-aa: persist owner_pubkey in audio sessions, doc improvements, clippy fix

Commits on May 4, 2026

nip-aa: wire set_owner_pubkey in API-token and Okta/pubkey-only auth paths

nip-aa: fix clippy warnings (useless_vec, manual_repeat_n)

nip-aa: fix stale owner index on re-auth + reject malformed conditions per NIP-OA spec

nip-aa: fix subscription privilege leakage on re-auth, double error prefix, scope breadth, malformed AUTH handling

fix(nip-aa): subscription leakage on re-auth, first-auth failure state, audio ConnectionManager registration, owner removal agent disconnect

fix(nip-aa): audio auth ordering, close_connection API, wire owner-removal termination

fix(nip-aa): session expiry enforcement, auth epoch guards, owner-removal agent termination, subscription clearing, fail-closed kind= rejection

fix(nip-aa): atomic re-auth — bump auth_epoch before state transition to close subscription race window

fix(nip-aa): sanitize client-facing error messages — generic responses, detailed server-side logs

fix(nip-aa): rate-limit all auth attempts per-connection (500ms min interval)

fix(nip-aa): unify rate limiters, sanitize remaining error leaks, block confused-deputy on Okta/JWT path