puter/paseo
1
0
Fork 0
mirror of https://github.com/getpaseo/paseo.git synced 2026-10-28 04:03:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(hosts): validate safe targets and verify encrypted relay routes

Browse Source
This commit is contained in:
Mohamed Boudra
2026-10-21 10:33:11 +02:00
parent 3b50636e14
commit 32fbcdc4a8
15 changed files with 412 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/connected-hosts.md
+1
View File
@@ -25,6 +25,7 @@ permissions closes existing routes. A routed API cannot select a second hop.
A producer that registers a host through a routed API is qualified on B as
`route:<B principal>:<A serverId>:<A producer>`, with each component percent-encoded. This namespace belongs to the authenticated link
principal. An ordinary direct B consumer does not become that producer by supplying a source key.
The optional `server_info.sourceId` reports this producer identity for source-owner controls; it does not describe the authenticated admission principal.
Trusted server plugins retain the authority of their runtime; they are not sandboxed by this feature.
## Connections and recovery