bergamot
731b60863a
Tunnel method now requires Bearer JWT (HMAC-HS256) in gRPC metadata.
- internal/auth: pure-stdlib verifier + issuer + revoked-jti list
- internal/tunnel: per-target rate limiter + egress allowlist with
wildcard support + crypto/rand frame padding to {1KB, 4KB, 16KB}
- cmd/server reads /etc/stats-gateway/{jwt.key,tunnel.yaml,revoked.txt}
via --config-dir flag
- cmd/issue-token Go binary wraps auth.Issue
- configs/tunnel.yaml example with projectshitpost wildcard
Tests: 13 PASS across 5 packages.
14 lines
269 B
Makefile
14 lines
269 B
Makefile
.PHONY: build test clean
|
|
|
|
build:
|
|
go build -o bin/stats-gateway ./cmd/server
|
|
go build -o bin/stats-collector ./cmd/collector
|
|
go build -o bin/stats-snapshot ./cmd/snapshot
|
|
go build -o bin/stats-issue-token ./cmd/issue-token
|
|
|
|
test:
|
|
go test ./...
|
|
|
|
clean:
|
|
rm -rf bin/
|