Jannis Braun ceaa08b4bd fix(federation): extend /peer/accept safeguard to cover needs_attention ...

Unauthenticated /peer/accept must not overwrite hmac_secret for peers in
needs_attention, same as active. needs_attention means 'auth trust broke
and we don't know why' — letting an unauthenticated request flip it back
would reintroduce a path for silent HMAC rotation via the outbox-401 loop
the rest of #19 closes. Legitimate recovery is the admin 'Reset peering'
action (next task).

2026-04-21 20:49:19 +02:00

..

desktop

chore: sync repo with deployed state — clean up old specs/plans, desktop tweaks

2026-03-24 04:33:23 +01:00

server

fix(federation): extend /peer/accept safeguard to cover needs_attention

2026-04-21 20:49:19 +02:00

shared

types: align FederationPeer union with actual server statuses

2026-04-21 20:29:14 +02:00

web

feat(web): handle dm_call_undeliverable — toast + tear down outgoing call on terminal

2026-04-21 14:02:08 +02:00