Add a pluggable Edge Cookie provider seam with the built-in HMAC provider - #1043

Open

jwrosewell wants to merge 38 commits into

IABTechLab:mainfrom

jwrosewell:split/1-ec-provider

Commits on Sep 2, 2026

Add a pluggable Edge Cookie provider seam with the built-in HMAC provider
jwrosewell
committed
b740265
Accept the provider-code envelope on the partner-facing identifier paths
jwrosewell
committed
d2ad2a9
Rename the legacy passphrase migration so CodeQL stops tainting Settings
jwrosewell
committed
b2623cb
Stop serving without identity when a selected provider is unavailable
jwrosewell
committed
918f96c
Hold the deprecated EC passphrase to the same rules as the new block
jwrosewell
committed
61b7cf1
Reject unknown keys in the built-in HMAC provider block
jwrosewell
committed
5b01f98
Stop rather than run stateless when the hmac block is missing
jwrosewell
committed
7424932
Restore the missing line continuation in the mint rejection message
jwrosewell
committed
d6dc848
Give EdgeCookieProvider its own doc comment back
jwrosewell
committed
45ec829
Delete the unused ec::get_ec_id helper
jwrosewell
committed
c4c584c
Correct the provider module docs about when evidence arrives
jwrosewell
committed
5203c2d
Replace the scattered EC provider key strings with a typed selector
jwrosewell
committed
e44ff38
Reserve core's own response surface against provider effects
jwrosewell
committed
afdb7be
Dispatch partner-path identifier checks by provider code
jwrosewell
committed
e90b471
Let each provider decide whether it needs the client IP
jwrosewell
committed
3b74d74
State a real retirement condition for the legacy bare-identifier reader
jwrosewell
committed
29a3a7f
Key identity-graph reads and write-backs by the canonical form
jwrosewell
committed
cb62786
Egress only an Edge Cookie identifier the provider recognizes
jwrosewell
committed
fe23dcc
Record the cluster-count gap the identifier envelope opens
jwrosewell
committed
e3ba579
Consume the refused Report in the testlight egress tests
jwrosewell
committed
292df1f
Drop the request-evidence accessors that have no caller
jwrosewell
committed
a3a5d57
Collapse the EC provider selector to statelessness and a named provider
jwrosewell
committed
b70ddc0
Accumulate provider response headers instead of replacing the origin's
jwrosewell
committed
5da52c8
State what a provider switch really does to existing identities
jwrosewell
committed
67c3b0b
Name the design documents rather than their paths in doc comments
jwrosewell
committed
1f62e1a
Restore the line continuations missed in the neighbouring files
jwrosewell
committed
c7464bc
Correct the two provider doc comments the earlier pass missed
jwrosewell
committed
ef81e88
Stop a provider code from panicking when a vendor builds one at run time
jwrosewell
committed
acb416f
Refuse two Edge Cookie providers claiming the same name
jwrosewell
committed
8eb0a9b
Build the internal header list from the Edge Cookie response headers
jwrosewell
committed
f2b1825
Resolve the Edge Cookie provider once per request instead of twice
jwrosewell
committed
52e2692
Load Spin settings from the config store instead of a baked template
jwrosewell
committed
1c7df60
Stop exposing an inbound Edge Cookie identifier nothing has vouched for
jwrosewell
committed
3234092
Keep the whole request-evidence interface
jwrosewell
committed
1df8bf7
Documentation and house-style cleanup for the Edge Cookie provider PR
jwrosewell
committed
8a29373
Name the caching reason accurately in the reserved-header rejection
jwrosewell
committed
147a37b
Collapse Edge Cookie provider injection to a single seam
jwrosewell
committed
7dda9dd
Remove the orphaned no-client-IP test fixture
jwrosewell
committed
c16c99d