@company-semantics/contracts 42.0.0 → 42.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +1 -1
- package/src/security/token-policy.ts +2 -16
package/package.json
CHANGED
|
@@ -61,28 +61,14 @@ export const AUTH_TOKEN_POLICY_REQUIREMENTS = {
|
|
|
61
61
|
hashAlgorithm: "SHA-256",
|
|
62
62
|
storageFormat: "hashed",
|
|
63
63
|
contextPatterns: ["session"],
|
|
64
|
-
conformance: {
|
|
65
|
-
status: "unmet",
|
|
66
|
-
gap:
|
|
67
|
-
"Issuance now conforms: minted by issueCapabilityToken at 256 bits and " +
|
|
68
|
-
"stored as a sha256:v1: digest (ADR-BE-460 deploy B). Still UNMET because " +
|
|
69
|
-
"the dual-read window is open — sessions.token retains the raw value so a " +
|
|
70
|
-
"rollback keeps working, and every lookup carries a plaintext fallback arm. " +
|
|
71
|
-
"Conformance is reached when migration C retires the column and deploy D " +
|
|
72
|
-
"removes the fallbacks.",
|
|
73
|
-
},
|
|
64
|
+
conformance: { status: "enforced" },
|
|
74
65
|
},
|
|
75
66
|
ChatShareToken: {
|
|
76
67
|
minEntropyBits: 256,
|
|
77
68
|
hashAlgorithm: "SHA-256",
|
|
78
69
|
storageFormat: "hashed",
|
|
79
70
|
contextPatterns: ["share"],
|
|
80
|
-
conformance: {
|
|
81
|
-
status: "unmet",
|
|
82
|
-
gap:
|
|
83
|
-
"Minted with randomBytes(32) and persisted verbatim: chat_shares.token holds " +
|
|
84
|
-
"the share-URL value itself, and lookup is raw equality against it.",
|
|
85
|
-
},
|
|
71
|
+
conformance: { status: "enforced" },
|
|
86
72
|
},
|
|
87
73
|
InviteToken: {
|
|
88
74
|
minEntropyBits: 256,
|