mirror of
https://github.com/getpaseo/paseo.git
synced 2026-10-23 17:52:49 +00:00
89727f43bc
* fix(server): require the daemon password on relay connections A password-protected daemon still admitted relay clients that sent no credential in their encrypted hello, so a leaked pairing link alone gave full control. Remove the COMPAT(relayPasswordOptional) shim: relay clients now need the password like direct ones. Fixes #4087 * test(server): cover relay password admission end to end Run a password-protected daemon behind a local relay and connect with the real host client over relay://: no password and a wrong password are refused, the right password is admitted and serves RPCs. * test(server): run relay password regression in CI * test(ci): include relay password regression in command expectation --------- Co-authored-by: Nicholas Maglowsch Salgueiro <21068323+nickmaglowsch@users.noreply.github.com> Co-authored-by: Mohamed Boudra <boudra.moha@gmail.com>