zeekay 518408ebcc feat: BLS threshold + security hardening + ZapDB KMS-backing ...

Security (from red team review):
- Replay protection: request_id + timestamp freshness on sign API
- Ed25519 message auth re-enabled on all protocol messages
- DKG timeout (5min) + signing timeout (30s) with watchdog
- Dedup map TTL cleanup (10min expiry, 2min sweep)

BLS threshold signing:
- KeyTypeBLS + keygen/signing sessions
- TrustedDealer pattern for BLS DKG
- CBOR serialization for BLS config
- 8 tests

ZapDB KMS-backing:
- HSM PasswordProvider wired to ZapDB init
- Supports: AWS KMS, GCP KMS, Azure KV, env, file
- Default env for backward compat
- 19 tests

Also: sr25519 sessions, fixed SignWireMessage build break

2026-03-19 01:15:33 -07:00

..

auth_test.go

feat: MPC wallet dashboard - full-stack implementation

2026-02-28 13:27:34 -08:00

auth.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_audit.go

feat: multi-chain address derivation (BTC, SOL), fix policy engine

2026-02-24 23:19:15 -08:00

handlers_auth.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_bridge_admin.go

feat: bridge admin dashboard, WebAuthn device management, LSS protocol selection

2026-02-25 01:38:29 -08:00

handlers_bridge.go

feat: BLS threshold + security hardening + ZapDB KMS-backing

2026-03-19 01:15:33 -07:00

handlers_oidc.go

feat: OIDC login via Lux ID, fix ingress routing, deploy to lux-k8s

2026-02-22 12:55:48 -08:00

handlers_payments.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_policy.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_settlement.go

feat: dashboard pages + security hardening for intents, settlements, tx lifecycle

2026-03-02 16:38:54 -08:00

handlers_smart_wallets.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_subscriptions.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_tx.go

feat: BLS threshold + security hardening + ZapDB KMS-backing

2026-03-19 01:15:33 -07:00

handlers_users.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_vaults.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_wallets.go

feat: sr25519 threshold signing for Polkadot/Substrate

2026-03-18 14:09:08 -07:00

handlers_webauthn.go

feat: WebAuthn biometric signing, enforce approver roles in policies

2026-02-25 00:46:17 -08:00

handlers_webhooks.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

middleware_test.go

feat: MPC wallet dashboard - full-stack implementation

2026-02-28 13:27:34 -08:00

middleware.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

policy_engine_test.go

feat: replace BadgerDB with ZapDB, remove local replace directives, vendor mode CI/CD

2026-03-01 15:27:32 -08:00

policy_engine.go

feat: WebAuthn biometric signing, enforce approver roles in policies

2026-02-25 00:46:17 -08:00

ratelimit.go

fix: OAuth login URL uses /login endpoint, update E2E selectors to match Lux ID form

2026-02-23 22:21:41 -08:00

replay_guard_test.go

feat: BLS threshold + security hardening + ZapDB KMS-backing

2026-03-19 01:15:33 -07:00

replay_guard.go

feat: BLS threshold + security hardening + ZapDB KMS-backing

2026-03-19 01:15:33 -07:00

scheduler.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

server.go

feat: BLS threshold + security hardening + ZapDB KMS-backing

2026-03-19 01:15:33 -07:00

webhook_sender.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00