Bitkit sign-in hardening: hand-off confirmation, grant cleanup, lapsed claims, rate limits - #112

Merged

BitcoinErrorLog merged 17 commits into

release/shop-v0.6.8from

cursor/bitkit-grant-backlog-240a

Sep 24, 2026

Commits on Sep 24, 2026

fix(auth): sign out and drop the keys of a grant session that cannot be saved
BitcoinErrorLog
committed
0d53eca
fix(auth): drop a pending #s= export after a grant session restore
BitcoinErrorLog
committed
2b3a7d0
fix(auth): keep the authorization URL out of the QR slot markup
BitcoinErrorLog
committed
7d8e29a
fix(marketplace): end a bootstrap flow whose claim lease lapsed
BitcoinErrorLog
committed
65f6708
fix(marketplace): terminalize a cancelled bootstrap flow before opening its context
BitcoinErrorLog
committed
15af2e8
fix(marketplace): key the challenge pubky bucket by client IP
BitcoinErrorLog
committed
6a60b15
fix(auth): hold every grant session to the full Shop grant and drop its step-up refusal
BitcoinErrorLog
committed
a383356
fix(auth): confirm a #s= session hand-off before it signs the tab in
BitcoinErrorLog
committed
a5a2109
docs(changelog): note the Bitkit sign-in and hand-off fixes
BitcoinErrorLog
committed
ed0e90c
style(auth): format the grant backlog tests and sort the restore imports
BitcoinErrorLog
committed
255157e
fix(auth): keep a failed grant-key cleanup pending until the store is empty
BitcoinErrorLog
committed
2bc65d1
fix(marketplace): drop the per-pubky challenge bucket
BitcoinErrorLog
committed
9390b58
fix(marketplace): key rate limits by the platform-written client hop
BitcoinErrorLog
committed
0645f3c
fix(auth): refuse a step-up for a grant session at the controller
BitcoinErrorLog
committed
a2a2e07
test(auth): give the side-by-side Bitkit fixture the full Shop grant
BitcoinErrorLog
committed
b656309
Merge branch 'release/shop-v0.6.8' into cursor/bitkit-grant-backlog-240a
BitcoinErrorLog
authored
32fdbc3
Merge branch 'release/shop-v0.6.8' into cursor/bitkit-grant-backlog-240a
BitcoinErrorLog
authored
1b77ca8

Navigation Menu

Bitkit sign-in hardening: hand-off confirmation, grant cleanup, lapsed claims, rate limits - #112

Bitkit sign-in hardening: hand-off confirmation, grant cleanup, lapsed claims, rate limits#112
BitcoinErrorLog merged 17 commits into
release/shop-v0.6.8from
cursor/bitkit-grant-backlog-240a

Commits on Sep 24, 2026

fix(auth): sign out and drop the keys of a grant session that cannot be saved

fix(auth): drop a pending #s= export after a grant session restore

fix(auth): keep the authorization URL out of the QR slot markup

fix(marketplace): end a bootstrap flow whose claim lease lapsed

fix(marketplace): terminalize a cancelled bootstrap flow before opening its context

fix(marketplace): key the challenge pubky bucket by client IP

fix(auth): hold every grant session to the full Shop grant and drop its step-up refusal

fix(auth): confirm a #s= session hand-off before it signs the tab in

docs(changelog): note the Bitkit sign-in and hand-off fixes

style(auth): format the grant backlog tests and sort the restore imports

fix(auth): keep a failed grant-key cleanup pending until the store is empty

fix(marketplace): drop the per-pubky challenge bucket

fix(marketplace): key rate limits by the platform-written client hop

fix(auth): refuse a step-up for a grant session at the controller

test(auth): give the side-by-side Bitkit fixture the full Shop grant

Merge branch 'release/shop-v0.6.8' into cursor/bitkit-grant-backlog-240a

Merge branch 'release/shop-v0.6.8' into cursor/bitkit-grant-backlog-240a