zeekay c9445c9d29 feat(zapauth): JWKS-bearer gate on KMS-facing ZAP server (LP-103) ...

New pkg/zapauth verifies a JWT presented in OpAuthHello (0x00EF)
BEFORE the X25519+ML-KEM-768 hybrid handshake. Per-peer claims are
attached by ZAP peer ID and consulted on every opcode dispatch.

Backwards compatible: defaults to auth=off so v1.13.x clients keep
working. ZAP_AUTH_REQUIRED=true rejects unauthenticated peers; the
flip happens after every KMS deploys with bearer minting (luxfi/kms
v1.9.0 pkg/iamclient).

- pkg/zapauth/{verifier,verifier_test}.go — Verifier, JWKS cache,
  AuthHello frame, stdlib-only signature verification (RS/ES/EdDSA).
- pkg/api/zap_kms_server.go — KMSZapConfig, StartKMSZAPWith, per-op
  checkAuth gate, OpAuthHello handler.
- pkg/api/zap_kms_server_auth_test.go — required+advisory+missing+bad
  token + nil-verifier integration tests against a self-contained
  ES256 JWKS endpoint.
- cmd/mpcd/main.go — wires ZAP_JWKS_URL / ZAP_EXPECTED_ISS /
  ZAP_EXPECTED_AUDIENCES / ZAP_AUTH_REQUIRED env vars.
- docs/zap-auth.md, LLM.md — protocol reference + LLM map entry.

Tests: pkg/zapauth (13/13), pkg/api KMSZAP (10/10 — 5 original +
5 new auth integration), pkg/zap (existing untouched).

2026-05-02 09:30:48 -07:00

..

auth_test.go

test: 33 regression tests for all security fixes

2026-04-06 23:35:05 -07:00

auth.go

security: fix remaining Red team findings (LOW + MEDIUM)

2026-04-06 23:28:34 -07:00

cas_concurrency_test.go

fix(mpc): F2/F10/F20/F23 — CAS on approve + enum validation + pagination total

2026-04-18 16:07:57 -07:00

handlers_approval.go

mpc: deployment-mode flag + audit dispatcher for fund-private clusters

2025-12-28 16:20:40 -08:00

handlers_audit.go

neutral: drop 'Lux'/'Hanzo' brand prefixes in user-facing strings

2026-04-25 21:46:16 -07:00

handlers_auth.go

security: fix remaining Red team findings (LOW + MEDIUM)

2026-04-06 23:28:34 -07:00

handlers_bridge_admin.go

feat: bridge admin dashboard, WebAuthn device management, LSS protocol selection

2026-02-25 01:38:29 -08:00

handlers_bridge.go

security: fix remaining Red team findings (LOW + MEDIUM)

2026-04-06 23:28:34 -07:00

handlers_kms_test.go

fix: remove /api/ prefix from all routes — use /v1/ only

2026-04-07 00:01:47 -07:00

handlers_kms.go

fix: remove /api/ prefix from all routes — use /v1/ only

2026-04-07 00:01:47 -07:00

handlers_mpc.go

R3-9: unify consumeBiometricChallenge on READ COMMITTED + GetForUpdate

2026-04-18 17:32:56 -07:00

handlers_oidc.go

fix: goimports formatting + CGO_ENABLED=0 for CI tests

2026-03-22 12:50:58 -07:00

handlers_operations.go

fix(mpc): R2-1/R2-2 — webauthn verification + CAS under Postgres

2026-04-18 17:02:33 -07:00

handlers_payments.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_policy.go

feat(api): /v1/mpc/* spec surface (wallets, sessions, operations, policies, audit)

2026-04-18 15:18:36 -07:00

handlers_sessions.go

fix(mpc): R2-1/R2-2 — webauthn verification + CAS under Postgres

2026-04-18 17:02:33 -07:00

handlers_settlement.go

security: fix 15 custody audit findings, add regression + fuzz tests

2026-04-01 09:00:06 -07:00

handlers_smart_wallets.go

fix: per-org MPC isolation — orgID end-to-end threading + security hardening

2026-03-24 16:55:54 -07:00

handlers_subscriptions.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_trade_approval.go

feat: configurable WebAuthn RP ID and origins for Liquidity exchange

2026-04-02 19:09:00 -07:00

handlers_treasury_test.go

feat(mpc): R6 requireRegulator invariant test + T3 CodeQL/SBOM workflow fix

2026-04-18 22:41:45 -07:00

handlers_treasury.go

feat(mpc): treasury 3-of-5 + purge Postgres, SQLite-only

2026-04-18 21:07:26 -07:00

handlers_tx.go

fix: per-org MPC isolation — orgID end-to-end threading + security hardening

2026-03-24 16:55:54 -07:00

handlers_users.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_vaults.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

handlers_wallet.go

wallet: 9-tier wallet architecture as first-class concept

2025-12-28 15:54:10 -08:00

handlers_wallets.go

security: fix 15 custody audit findings, add regression + fuzz tests

2026-04-01 09:00:06 -07:00

handlers_webauthn.go

neutral: drop 'Lux'/'Hanzo' brand prefixes in user-facing strings

2026-04-25 21:46:16 -07:00

handlers_webhooks.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

middleware_test.go

R3-2: remove * wildcard bypass in API-key hasPermission

2026-04-18 17:13:07 -07:00

middleware.go

R3-2: remove * wildcard bypass in API-key hasPermission

2026-04-18 17:13:07 -07:00

policy_engine_test.go

feat: replace BadgerDB with ZapDB, remove local replace directives, vendor mode CI/CD

2026-03-01 15:27:32 -08:00

policy_engine.go

feat: WebAuthn biometric signing, enforce approver roles in policies

2026-02-25 00:46:17 -08:00

ratelimit_test.go

test: 33 regression tests for all security fixes

2026-04-06 23:35:05 -07:00

ratelimit.go

security: harden internal MPC API, enforce TLS-only transport, restrict egress

2026-04-07 14:00:47 -07:00

replay_guard_test.go

feat: BLS threshold + security hardening + ZapDB KMS-backing

2026-03-19 01:15:33 -07:00

replay_guard.go

fix: goimports formatting + CGO_ENABLED=0 for CI tests

2026-03-22 12:50:58 -07:00

scheduler.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

security_fuzz_test.go

security: fix 15 custody audit findings, add regression + fuzz tests

2026-04-01 09:00:06 -07:00

security_negative_test.go

fix: remove all tenant-specific data from MPC infrastructure

2026-04-07 00:42:17 -07:00

security_regression_test.go

fix: remove all tenant-specific data from MPC infrastructure

2026-04-07 00:42:17 -07:00

server_test.go

test: 33 regression tests for all security fixes

2026-04-06 23:35:05 -07:00

server.go

sec(mpc): gate TFHE wallet keygen behind experimental_tfhe build tag

2026-04-28 08:46:08 -07:00

treasury_test.go

feat(mpc): treasury 3-of-5 + purge Postgres, SQLite-only

2026-04-18 21:07:26 -07:00

webhook_sender.go

fix(ci): goimports with local-prefixes=github.com/luxfi/mpc

2026-03-01 19:10:22 -08:00

ws.go

feat: REST + WebSocket + ZAP transports on every MPC node

2026-04-17 19:55:55 -07:00

zap_kms_server_auth_test.go

feat(zapauth): JWKS-bearer gate on KMS-facing ZAP server (LP-103)

2026-05-02 09:30:48 -07:00

zap_kms_server_test.go

feat(mpcd): expose ZAP server on :9970 for KMS handshake

2026-05-01 01:35:13 -07:00

zap_kms_server.go

feat(zapauth): JWKS-bearer gate on KMS-facing ZAP server (LP-103)

2026-05-02 09:30:48 -07:00

zap_server.go

feat: REST + WebSocket + ZAP transports on every MPC node

2026-04-17 19:55:55 -07:00