0 releases 3 tags

RSS feed

• bastion-v0.4.1-security-final 782f5654ac

  Compare

  fix: shared bearer auth, delegation depth, SQLite permissions

  Ghost released this 2026-04-14 21:31:46 +00:00 | -21 commits to main since this release

  C-4: MCP endpoint requires verified bearer token. Unauthenticated
  requests rejected. _extract_principal() replaced by verified
  AuthResult from middleware.
  C-8: All delegation endpoints require verified bearer token.
  X-Delegator-DID header removed — identity from token only.
  delegator_ac_id validated to belong to authenticated principal.
  Only delegators can revoke. Only delegator/delegate can view.
  H-6: SQLite file permissions restricted to 0o600 (owner-only).
  Umask set before creation. WAL/SHM files also restricted.
  H-7: Delegation depth tracked and enforced against max_delegation_depth.
  Sub-delegations increment depth. Exceeded depth → 403.

  Shared TokenAuthenticator auto-detects identity driver from JWT
  issuer claim (Keycloak or Entra). verify_bearer FastAPI dependency
  for all protected endpoints. Health endpoint remains public.

  ALL 10 critical findings CLOSED. ALL 10 high findings CLOSED.

  Signed-off-by: Tyler King tking@guildhouse.dev

  Downloads

  • Source code (ZIP)
    1 download
  • Source code (TAR.GZ)
    1 download