Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

IABTechLab / trusted-server Public

Notifications You must be signed in to change notification settings
Fork 12
Star 42

Code
Issues 179
Pull requests 67
Actions
Projects
Wiki
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Wiki
Security and quality
Insights

Add the provider documentation set and finish the decomposition - #1047

#1047

Open

jwrosewell wants to merge 96 commits into

IABTechLab:mainIABTechLab/trusted-server:mainfrom

jwrosewell:split/5-response-hook-docsjwrosewell/trusted-server:split/5-response-hook-docsCopy head branch name to clipboard

Conversation Commits96 (96)Checks Files changed

Open

Add the provider documentation set and finish the decomposition#1047
jwrosewell wants to merge 96 commits into
IABTechLab:mainfrom
jwrosewell:split/5-response-hook-docs

Commits

Commits on Sep 2, 2026

Add a pluggable Edge Cookie provider seam with the built-in HMAC provider
jwrosewell
committed
b740265
Accept the provider-code envelope on the partner-facing identifier paths
jwrosewell
committed
d2ad2a9
Rename the legacy passphrase migration so CodeQL stops tainting Settings
jwrosewell
committed
b2623cb
Stop serving without identity when a selected provider is unavailable
jwrosewell
committed
918f96c
Hold the deprecated EC passphrase to the same rules as the new block
jwrosewell
committed
61b7cf1
Reject unknown keys in the built-in HMAC provider block
jwrosewell
committed
5b01f98
Stop rather than run stateless when the hmac block is missing
jwrosewell
committed
7424932
Restore the missing line continuation in the mint rejection message
jwrosewell
committed
d6dc848
Give EdgeCookieProvider its own doc comment back
jwrosewell
committed
45ec829
Delete the unused ec::get_ec_id helper
jwrosewell
committed
c4c584c
Correct the provider module docs about when evidence arrives
jwrosewell
committed
5203c2d
Replace the scattered EC provider key strings with a typed selector
jwrosewell
committed
e44ff38
Reserve core's own response surface against provider effects
jwrosewell
committed
afdb7be
Dispatch partner-path identifier checks by provider code
jwrosewell
committed
e90b471
Let each provider decide whether it needs the client IP
jwrosewell
committed
3b74d74
State a real retirement condition for the legacy bare-identifier reader
jwrosewell
committed
29a3a7f
Key identity-graph reads and write-backs by the canonical form
jwrosewell
committed
cb62786
Egress only an Edge Cookie identifier the provider recognizes
jwrosewell
committed
fe23dcc
Record the cluster-count gap the identifier envelope opens
jwrosewell
committed
e3ba579
Consume the refused Report in the testlight egress tests
jwrosewell
committed
292df1f
Drop the request-evidence accessors that have no caller
jwrosewell
committed
a3a5d57
Collapse the EC provider selector to statelessness and a named provider
jwrosewell
committed
b70ddc0
Accumulate provider response headers instead of replacing the origin's
jwrosewell
committed
5da52c8
State what a provider switch really does to existing identities
jwrosewell
committed
67c3b0b
Name the design documents rather than their paths in doc comments
jwrosewell
committed
1f62e1a
Restore the line continuations missed in the neighbouring files
jwrosewell
committed
c7464bc
Correct the two provider doc comments the earlier pass missed
jwrosewell
committed
ef81e88
Stop a provider code from panicking when a vendor builds one at run time
jwrosewell
committed
acb416f
Refuse two Edge Cookie providers claiming the same name
jwrosewell
committed
8eb0a9b
Build the internal header list from the Edge Cookie response headers
jwrosewell
committed
f2b1825
Resolve the Edge Cookie provider once per request instead of twice
jwrosewell
committed
52e2692
Load Spin settings from the config store instead of a baked template
jwrosewell
committed
1c7df60
Stop exposing an inbound Edge Cookie identifier nothing has vouched for
jwrosewell
committed
3234092
Keep the whole request-evidence interface
jwrosewell
committed
1df8bf7
Documentation and house-style cleanup for the Edge Cookie provider PR
jwrosewell
committed
8a29373
Name the caching reason accurately in the reserved-header rejection
jwrosewell
committed
147a37b
Collapse Edge Cookie provider injection to a single seam
jwrosewell
committed
7dda9dd
Remove the orphaned no-client-IP test fixture
jwrosewell
committed
c16c99d
Add device and geo provider selection with the host-signal Edge Cookie provider
jwrosewell
committed
99b1acd
Omit an unset provider selector from the serialized config
jwrosewell
committed
20fee6a
Read the Cloudflare visitor region so US state opt-outs are honored
jwrosewell
committed
74047c1
Reunite the request-info builders with their own documentation
jwrosewell
committed
cf8d098
Documentation and house-style cleanup for the device and geo provider PR
jwrosewell
committed
de98934
Drop the unused HeaderMap import from the device tests
jwrosewell
committed
d3b4b06
Give each vendor crate a visible maintainers declaration
jwrosewell
committed
dcdb493
Add the permission model with the Privacy Taxonomy vocabulary
jwrosewell
committed
5467c53
Correct the permission-model docs to what the code does
jwrosewell
committed
3edfb66
Give the remaining test fixtures the now-required default country
jwrosewell
committed
a558939
Say which geo lookups can reach the requires-signal floor, and prove it
jwrosewell
committed
8f8e5cc
Scope the permission-gating claim to the provider it is true of
jwrosewell
committed
d002c9c
State that evidence is not rationed and use is
jwrosewell
committed
8798e88
Name the IAB Tech Lab Privacy Taxonomy as the source of the vocabulary
jwrosewell
committed
1f64eb8
Build the test provider code through the macro that cannot fail
jwrosewell
committed
deb9c9f
Documentation and house-style cleanup for the permission model PR
jwrosewell
committed
4ce55ce
Complete the mint and fingerprint house-style sweep after rebase
jwrosewell
committed
6d150d8
Document how the resolved permissions reach filters and the page
jwrosewell
committed
a36db64
Expose the request permission state on the tsjs core API
jwrosewell
committed
9d3c753
Pass the resolved permission state to integration request filters
jwrosewell
committed
d1cd60f
Carry the resolved permission state to the page
jwrosewell
committed
0af6509
Document the permission rules tree and retire the default country
jwrosewell
committed
d3ed330
Match the guide's jurisdiction values to the policy parser
jwrosewell
committed
0ab0dda
Document jurisdiction as a per-node inherited attribute
jwrosewell
committed
bea39b8
Note the unknown jurisdiction on a failed lookup and the DE codes
jwrosewell
committed
6fe991e
Point the GDPR page at the rules tree for jurisdiction assignment
jwrosewell
committed
3c44407
Add the permission model guide to the site navigation
jwrosewell
committed
d118ff2
Restructure the permission policy into a tree of places
jwrosewell
committed
727f785
Give the integration environment a real place through Viceroy geolocation
jwrosewell
committed
31fbe46
Give the template-cache harness a real place through Viceroy geolocation
jwrosewell
committed
7df640c
Anchor the harness's geo selector uncomment to the whole line
jwrosewell
committed
60458a5
Repair the harness's geo selector uncomment
jwrosewell
committed
f9c9632
Model a realistic demo policy in permissions.yaml
jwrosewell
committed
e43095e
State that no policy ever ships with Trusted Server
jwrosewell
committed
36a28a7
Move the sample permissions into config/permissions
jwrosewell
committed
444d908
Add the permissions inspector, driven by the real code as WebAssembly
jwrosewell
committed
1f0d443
Mark the inspector build script executable
jwrosewell
committed
5fa76c9
Limit the inspector workflow token to reading contents
jwrosewell
committed
ae055e1
Point the compiled-in rules doc at config/permissions
jwrosewell
committed
d87711f
Add the client-set Edge Cookie value path
jwrosewell
committed
32b8d2e
Tidy the client-cycle spec prose and state the no-store rule precisely
jwrosewell
committed
657a0ac
Hold the resolve endpoint to the reserved response-surface contract
jwrosewell
committed
3fa2ed0
Accumulate provider response headers on the resolve endpoint too
jwrosewell
committed
749abbc
Build the resolve test provider code through the macro that cannot fail
jwrosewell
committed
3fdfb9e
Documentation and house-style cleanup for the client-resolve PR
jwrosewell
committed
b09c7c5
Align the header-accumulation test with the reserved cache-control surface
jwrosewell
committed
0e4bfb8
Reach the resolve endpoint's provider through the single seam
jwrosewell
committed
77ab44a
Authorize the client resolve endpoint by exact origin, and restart the resolve cycle on a provider switch
jwrosewell
committed
eab1359
Compare resolve origins by the RFC 6454 same-origin test
jwrosewell
committed
0050c2c
Make the demo page script check its required permission before posting
jwrosewell
committed
d9c2439
Add the provider documentation set and finish the decomposition
jwrosewell
committed
8dfe29c
Correct the documentation set against the code
jwrosewell
committed
fd43545
Remove the test fixture and import the evidence rewrite left behind
jwrosewell
committed
181db1b
Put back the check on what a provider is handed with no client IP
jwrosewell
committed
e8d899a
Run the core library tests natively in CI as well as on WebAssembly
jwrosewell
committed
ba99d8c
Documentation and house-style cleanup for the response-hook and docs PR
jwrosewell
committed
4d7a1c6
Drop the retired default_country from the configuration guide
jwrosewell
committed
2127ec6
Correct the configuration guide's permissions file location
jwrosewell
committed
8608f73

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.