Jannis Braun d7c30f2c50 feat(federation): add nonce to HMAC sign/verify and header build/parse (FED-008) ...

- signRequest now accepts optional nonce; payload becomes `${timestamp}.${nonce}.${body}` when present, falling back to `${timestamp}.${body}` for legacy peers
- verifySignature accepts matching nonce parameter and passes it through
- buildFederationHeaders generates a UUID nonce per request and includes X-Federation-Nonce header
- parseFederationHeaders extracts X-Federation-Nonce into nonce field (null when absent)

2026-03-31 18:07:19 +02:00

..

desktop

chore: sync repo with deployed state — clean up old specs/plans, desktop tweaks

2026-03-24 04:33:23 +01:00

server

feat(federation): add nonce to HMAC sign/verify and header build/parse (FED-008)

2026-03-31 18:07:19 +02:00

shared

chore: add system docs, specs, and misc updates from other sessions

2026-03-31 03:40:34 +02:00

web

chore: add system docs, specs, and misc updates from other sessions

2026-03-31 03:40:34 +02:00