zeekay f581b655fe security: harden internal MPC API, enforce TLS-only transport, restrict egress ...

- Add bearer token auth to internal MPC API (port 9800): /keygen, /keys,
  /backup now require Authorization header. Token from MPC_INTERNAL_API_KEY
  env (KMS-synced) or derived from Ed25519 node identity.
- Replace DualModeListener with TLSOnlyListener: plaintext peer connections
  are rejected. TLS 1.3 with PQ key exchange is mandatory.
- Add dedicated 20 RPM rate limiter on bridge signing and intent signing
  endpoints (separate from global 100 RPM).
- Add body size limit (1MB), read/write timeouts, and 10 RPM rate limiter
  to internal MPC API server.
- Restrict K8s NetworkPolicy egress for MPC nodes to peers, postgres,
  valkey, DNS, and HTTPS only (was unrestricted).
- Wire cluster-api-key in api-deployment for authenticated proxy to
  internal MPC API. Forward as Authorization: Bearer header.
- Remove hardcoded dev JWT_SECRET default from compose.yml (now required).
- Add internal-api-key to KMSSecret CRD and StatefulSet env.

2026-04-07 14:00:47 -07:00

..

auth_test.go

test: 33 regression tests for all security fixes

2026-04-06 23:35:05 -07:00

auth.go

security: fix remaining Red team findings (LOW + MEDIUM)

2026-04-06 23:28:34 -07:00

handlers_audit.go

feat: multi-chain address derivation (BTC, SOL), fix policy engine

2026-02-24 23:19:15 -08:00

handlers_auth.go

security: fix remaining Red team findings (LOW + MEDIUM)

2026-04-06 23:28:34 -07:00

handlers_bridge_admin.go

feat: bridge admin dashboard, WebAuthn device management, LSS protocol selection

2026-02-25 01:38:29 -08:00

handlers_bridge.go

security: fix remaining Red team findings (LOW + MEDIUM)

2026-04-06 23:28:34 -07:00

handlers_kms_test.go

fix: remove /api/ prefix from all routes — use /v1/ only

2026-04-07 00:01:47 -07:00

handlers_kms.go

fix: remove /api/ prefix from all routes — use /v1/ only

2026-04-07 00:01:47 -07:00

handlers_oidc.go

fix: goimports formatting + CGO_ENABLED=0 for CI tests

2026-03-22 12:50:58 -07:00

handlers_payments.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_policy.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_settlement.go

security: fix 15 custody audit findings, add regression + fuzz tests

2026-04-01 09:00:06 -07:00

handlers_smart_wallets.go

fix: per-org MPC isolation — orgID end-to-end threading + security hardening

2026-03-24 16:55:54 -07:00

handlers_subscriptions.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_trade_approval.go

feat: configurable WebAuthn RP ID and origins for exchange

2026-04-02 19:09:00 -07:00

handlers_tx.go

fix: per-org MPC isolation — orgID end-to-end threading + security hardening

2026-03-24 16:55:54 -07:00

handlers_users.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_vaults.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_wallets.go

security: fix 15 custody audit findings, add regression + fuzz tests

2026-04-01 09:00:06 -07:00

handlers_webauthn.go

feat: configurable WebAuthn RP ID and origins for exchange

2026-04-02 19:09:00 -07:00

handlers_webhooks.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

middleware_test.go

feat: MPC wallet dashboard - full-stack implementation

2026-02-28 13:27:34 -08:00

middleware.go

security: fix 15 custody audit findings, add regression + fuzz tests

2026-04-01 09:00:06 -07:00

policy_engine_test.go

feat: replace BadgerDB with ZapDB, remove local replace directives, vendor mode CI/CD

2026-03-01 15:27:32 -08:00

policy_engine.go

feat: WebAuthn biometric signing, enforce approver roles in policies

2026-02-25 00:46:17 -08:00

ratelimit_test.go

test: 33 regression tests for all security fixes

2026-04-06 23:35:05 -07:00

ratelimit.go

security: harden internal MPC API, enforce TLS-only transport, restrict egress

2026-04-07 14:00:47 -07:00

replay_guard_test.go

feat: BLS threshold + security hardening + ZapDB KMS-backing

2026-03-19 01:15:33 -07:00

replay_guard.go

fix: goimports formatting + CGO_ENABLED=0 for CI tests

2026-03-22 12:50:58 -07:00

scheduler.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

security_fuzz_test.go

security: fix 15 custody audit findings, add regression + fuzz tests

2026-04-01 09:00:06 -07:00

security_negative_test.go

fix: remove all tenant-specific data from MPC infrastructure

2026-04-07 00:42:17 -07:00

security_regression_test.go

fix: remove all tenant-specific data from MPC infrastructure

2026-04-07 00:42:17 -07:00

server_test.go

test: 33 regression tests for all security fixes

2026-04-06 23:35:05 -07:00

server.go

security: harden internal MPC API, enforce TLS-only transport, restrict egress

2026-04-07 14:00:47 -07:00

webhook_sender.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00