Add a pluggable Edge Cookie provider seam with the built-in HMAC provider - #1043

Open

jwrosewell wants to merge 38 commits into

IABTechLab:mainfrom

jwrosewell:split/1-ec-provider

Commits on Aug 29, 2026

Add a pluggable Edge Cookie provider seam with the built-in HMAC provider
jwrosewell
committed
13d432c
Accept the provider-code envelope on the partner-facing identifier paths
jwrosewell
committed
ea51812
Rename the legacy passphrase migration so CodeQL stops tainting Settings
jwrosewell
committed
1f4a70b
Stop serving without identity when a selected provider is unavailable
jwrosewell
committed
f0ca12a
Hold the deprecated EC passphrase to the same rules as the new block
jwrosewell
committed
b2bb944
Reject unknown keys in the built-in HMAC provider block
jwrosewell
committed
472218b
Stop rather than run stateless when the hmac block is missing
jwrosewell
committed
c4d2f1d
Restore the missing line continuation in the mint rejection message
jwrosewell
committed
93cd1e8
Give EdgeCookieProvider its own doc comment back
jwrosewell
committed
a265c96
Delete the unused ec::get_ec_id helper
jwrosewell
committed
004581c
Correct the provider module docs about when evidence arrives
jwrosewell
committed
d6041f0
Replace the scattered EC provider key strings with a typed selector
jwrosewell
committed
885e3ce
Reserve core's own response surface against provider effects
jwrosewell
committed
69649aa
Dispatch partner-path identifier checks by provider code
jwrosewell
committed
53d632e
Let each provider decide whether it needs the client IP
jwrosewell
committed
941297f
State a real retirement condition for the legacy bare-identifier reader
jwrosewell
committed
e317190
Key identity-graph reads and write-backs by the canonical form
jwrosewell
committed
343ac3e
Egress only an Edge Cookie identifier the provider recognizes
jwrosewell
committed
8684c69
Record the cluster-count gap the identifier envelope opens
jwrosewell
committed
20bb082
Consume the refused Report in the testlight egress tests
jwrosewell
committed
84925ca
Drop the request-evidence accessors that have no caller
jwrosewell
committed
e45990b
Collapse the EC provider selector to statelessness and a named provider
jwrosewell
committed
b146aeb
Accumulate provider response headers instead of replacing the origin's
jwrosewell
committed
7c0428d
State what a provider switch really does to existing identities
jwrosewell
committed
69d5ed0

Commits on Aug 30, 2026

Commits on Aug 31, 2026

Commits on Sep 1, 2026

Remove the orphaned no-client-IP test fixture
jwrosewell
committed
8362aef