jcreek/CosmicClash
1
0
Fork 0
mirror of https://github.com/jcreek/CosmicClash.git synced 2026-09-13 04:22:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: add projected workload JWT adapter

Browse Source
This commit is contained in:
Josh Creek
2026-09-01 09:57:33 +01:00
parent febc69bdef
commit a70a0ebc74
4 changed files with 204 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
multiplayer-next.md
+3 -1
View File
@@ -93,7 +93,9 @@ product policy are in [`docs/MATCHMAKING.md`](docs/MATCHMAKING.md).
inert/alerting. Pure Go credential-claim validation, binding, hashing,
reconciliation, and the atomic receipt/completion/outbox SQL boundary exist;
projected-token/JWT adapters, trusted-cluster verification, rating-lock
integration, and production alerting remain.
integration, and production alerting remain. A dependency-free projected JWT
adapter now verifies the compact-token signature through an injected trust
boundary and delegates exact claim/time binding to the domain policy.
- [x] Complete the threat model for forgery, replay, queue/flood/bot abuse,
workload/insider compromise, DDoS, supply chain and denial-of-wallet
([THREAT-MODEL.md](docs/THREAT-MODEL.md)).