guru-connect

azcomputerguru/guru-connect

Fork 0

Files

History

Mike Swanson a453e7984e

Build and Test / Build Server (Linux) (push) Failing after 3m20s

Details

Build and Test / Build Agent (Windows) (push) Successful in 6m9s

Details

Build and Test / Security Audit (push) Successful in 4m21s

Details

Build and Test / Build Summary (push) Has been skipped

Details

feat(server): viewer-token view-only/control split - closes CRITICAL #1

Authz-strength fix (coord todo c8916c89), code-reviewed APPROVED. Replaces the
weak "view" gate (held by every role) with a permission-tiered access mode
stamped inside the signed viewer token:
- mint: is_admin() || has_permission("control") -> CONTROL token; else
  has_permission("view") -> VIEW_ONLY token; else 403.
- enforce: the relay drops MouseEvent/KeyEvent/SpecialKey for a VIEW_ONLY token
  before forwarding (video still streams); CONTROL tokens forward under the
  Task-3 throttle. Mode is unforgeable (in the signature) and unbypassable
  (all other viewer->agent payloads hit the catch-all and are never forwarded).
A low-privilege viewer-role user can now at most watch, never control. New
ViewerAccess enum (view_only|control) on ViewerClaims; 3 unit tests.

Audit CRITICAL #1 now fully closed (mechanism in Task 3 + this authz strength).
Not cargo-check-verified locally (no toolchain) - the push triggers CI
(clippy -D warnings + build + test) which is the verification gate.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-05-29 19:24:32 -07:00