zeekay 21fc7ef1c2 feat: passkey-encrypted backup shard — company CANNOT decrypt ...

Backup shard (shard 3) is encrypted with user's WebAuthn passkey
public key (P-256 ECDH). HSM stores the ciphertext but cannot
decrypt — only user's biometric (via Secure Enclave private key) can.

ATS shard (2) + encrypted_backup (3) = company CANNOT sign.
User shard (1) + passkey_decrypt(3) = user CAN exit independently.

Added UserPasskeyFingerprint to WalletBackup model.
Backup handler looks up user's WebAuthn credential for encryption.

2025-12-28 00:53:34 -08:00

..

auth_test.go

feat: MPC wallet dashboard - full-stack implementation

2025-12-27 13:11:38 -08:00

auth.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2025-12-27 16:50:10 -08:00

handlers_audit.go

feat: multi-chain address derivation (BTC, SOL), fix policy engine

2025-12-27 11:45:33 -08:00

handlers_auth.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2025-12-27 16:50:10 -08:00

handlers_bridge_admin.go

feat: bridge admin dashboard, WebAuthn device management, LSS protocol selection

2025-12-27 12:12:02 -08:00

handlers_bridge.go

fix: per-org MPC isolation — orgID end-to-end threading + security hardening

2025-12-28 00:20:28 -08:00

handlers_oidc.go

fix: goimports formatting + CGO_ENABLED=0 for CI tests

2025-12-27 23:01:00 -08:00

handlers_payments.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2025-12-27 16:50:10 -08:00

handlers_policy.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2025-12-27 16:50:10 -08:00

handlers_settlement.go

feat: passkey-encrypted backup shard — company CANNOT decrypt

2025-12-28 00:53:34 -08:00

handlers_smart_wallets.go

fix: per-org MPC isolation — orgID end-to-end threading + security hardening

2025-12-28 00:20:28 -08:00

handlers_subscriptions.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2025-12-27 16:50:10 -08:00

handlers_trade_approval.go

feat: add biometric trade approval flow with push notifications

2025-12-28 00:46:57 -08:00

handlers_tx.go

fix: per-org MPC isolation — orgID end-to-end threading + security hardening

2025-12-28 00:20:28 -08:00

handlers_users.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2025-12-27 16:50:10 -08:00

handlers_vaults.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2025-12-27 16:50:10 -08:00

handlers_wallets.go

fix: per-org MPC isolation — orgID end-to-end threading + security hardening

2025-12-28 00:20:28 -08:00

handlers_webauthn.go

fix: goimports formatting + CGO_ENABLED=0 for CI tests

2025-12-27 23:01:00 -08:00

handlers_webhooks.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2025-12-27 16:50:10 -08:00

middleware_test.go

feat: MPC wallet dashboard - full-stack implementation

2025-12-27 13:11:38 -08:00

middleware.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2025-12-27 16:50:10 -08:00

policy_engine_test.go

feat: replace BadgerDB with ZapDB, remove local replace directives, vendor mode CI/CD

2025-12-27 15:30:42 -08:00

policy_engine.go

feat: WebAuthn biometric signing, enforce approver roles in policies

2025-12-27 11:52:10 -08:00

ratelimit.go

fix: OAuth login URL uses /login endpoint, update E2E selectors to match Lux ID form

2025-12-27 11:25:41 -08:00

replay_guard_test.go

feat: BLS threshold + security hardening + ZapDB KMS-backing

2025-12-27 21:54:46 -08:00

replay_guard.go

fix: goimports formatting + CGO_ENABLED=0 for CI tests

2025-12-27 23:01:00 -08:00

scheduler.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2025-12-27 16:50:10 -08:00

server.go

feat: add biometric trade approval flow with push notifications

2025-12-28 00:46:57 -08:00

webhook_sender.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2025-12-27 16:50:10 -08:00