Repository navigation

feat(auth): a request token is one more auth on requests() - #5148

Merged

kixelated merged 68 commits into

mainfrom

quest/m1/auth/request-token

Oct 15, 2026

Merged

feat(auth): a request token is one more auth on requests()#5148
kixelated merged 68 commits into
mainfrom
quest/m1/auth/request-token

Commits on Oct 14, 2026
- feat(auth): a token on a request authorizes that request
  
  committed
  e72d5ed
- fix(auth)!: verify a request token against our own authorization, never the peer's grant
  
  committed
  9b02df8
- fix(net): renew a draft-16 announce's request token in band
  
  committed
  537c773
- feat(tokio): a connection presents its request token across reconnects
  
  committed
  d5b388b
- refactor(auth)!: name a request token's event Event::Request
  
  committed
  810ea41
- fix(auth): refuse an expired request grant and keep the acceptor's reason
  
  committed
  838a211
- fix(tokio): a request token on a moq-lite session fails the dial for good
  
  committed
  fed4a87
- refactor(tokio): an Unsupported dial is terminal, without a token variant
  
  committed
  31fd146
- fix(net): stand grant enforcement down for a request token set later
  
  committed
  06f482c
- docs: drop a line duplicated by the rebase onto main
  
  committed
  5adfd84
- fix(net): an announce ending under a request token ends only itself
  
  committed
  36c18f9
- Merge origin/main into quest/m1/auth/request-token
  
  committed
  0cd8def
- fix(net): a malformed token refresh answer still ends the session
  
  committed
  59b1daf
- Merge origin/main into quest/m1/auth/request-token
  
  committed
  a0f0f27
- fix(net): keep a revocation's reason, an announce's slot, and lite's refusal
  
  committed
  c414e94
- Merge origin/main into quest/m1/auth/request-token
  
  committed
  4c8faed
- fix(net): release an overflowed announce first, and mark legacy lite
  
  committed
  115b539
- fix(net): close three request-token races in admission and renewal
  
  committed
  076563a
- fix(net): MAX_REQUEST_UPDATES is an unknown option before draft 19
  
  committed
  5bf9d6e
- fix(net): recheck the request token before closing for an out-of-grant announce
  
  committed
  7880454
- fix(net): retract a repeated-token announce before the peer acknowledges
  
  committed
  616118e
- fix(net): read the announce token baseline before the initial set goes out
  
  committed
  517fdb3
- fix(net): admit a request grant as it stands, not as first issued
  
  committed
  e80f4aa
- feat(auth): request tokens are opt-in through their own queue
  
  committed
  8457c52
- fix(net): a cleared request token keeps the live announces it backed
  
  committed
  5a4728e
- fix(net): clearing the request token resumes grant enforcement
  
  committed
  81ec03f
- fix(net): enforcement admits an advertisement by the token it carried
  
  committed
  b01fb5c
- fix(net): a token change reconciles withheld namespaces
  
  committed
  4ef5981
- fix(net): an update queued behind a renewal spends its request ID on arrival
  
  committed
  ce9c3a8
- fix(net): a subscription's gate follows the token its SUBSCRIBE carried
  
  committed
  b2414f8
- test(net): a token cleared before an advertisement goes out withdraws it
  
  committed
  d9289e2
- Merge origin/main into quest/m1/auth/request-token
  
  committed
  f4264a5
- fix(net): a queued announce update is decoded on arrival
  
  committed
  70ad5c6
- fix(net): a renewal that cannot be sent ends its subscription
  
  committed
  f390b5c
- fix(net): a subscription's renewal never holds back its terminals
  
  committed
  b9240e4
- Merge remote-tracking branch 'origin/main' into iterate-5148
  kixelated
  committed
  49061d7
Commits on Oct 15, 2026
- fix(net): a renewal reaches the stream as soon as it takes its request ID
  
  committed
  92ea2b7
- fix(net): a token refresh answer with trailing bytes is fatal
  
  committed
  c9f72ed
- fix(net): a superseded renewal never goes out
  
  committed
  89a7bca
- fix(net): a legacy withdrawal behind an update ends a waiting request
  
  committed
  7f41c3a
- revert(net): keep a pending update pausing the withdrawal watch
  
  committed
  f9dacb3
- docs(net): poll_withdrawn claims no validation it does not do
  
  committed
  cf9e959
- Merge remote-tracking branch 'origin/main' into iterate-5148
  kixelated
  committed
  cb002f6
- fix(net): a request token never authorizes a TRACK_STATUS
  
  committed
  4a290b6
- fix(net): verify every request token, and refuse several on one request
  
  committed
  560ac77
- Merge remote-tracking branch 'origin/main' into iterate-5148
  kixelated
  committed
  2f660ed
- docs(net): Scoped receives every request token, covered or not
  
  committed
  3b3575d
- fix(tokio): renew the request token on sessions still draining
  
  committed
  ed595be
- fix(tokio): renew a draining session without owning it
  
  committed
  66444af
- Merge origin/main into quest/m1/auth/request-token
  kixelated
  committed
  9b8c24e
- fix(net): a refused renewal ends the subscription with its refusal
  
  committed
  8f63edf
- fix(net): carry a renewal refusal to the subscriber, and send nothing after it
  
  committed
  b505f3c
- refactor(auth): a request token is one more auth on requests()
  
  committed
  59a55c7
- Merge origin/main into quest/m1/auth/request-token
  kixelated
  committed
  3417e0e
- Merge remote-tracking branch 'origin/main' into iterate-5148
  kixelated
  committed
  0406b42
- fix(net): a namespace refresh sends the newest token to each announce
  
  committed
  c4c841f
- Merge origin/main into quest/m1/auth/request-token
  kixelated
  committed
  84e52f5
- Merge the concurrent request-token fixes into the unified rework
  
  committed
  ee8c7e3
- fix(auth): refuse an empty request token before the acceptor
  
  committed
  e0fa8a5
- docs: scope the one-token refusal to Rust
  
  committed
  86e34b4
- Merge origin/main into quest/m1/auth/request-token
  kixelated
  committed
  00dd78e
- refactor(auth): drop the 128-token pending bound
  
  committed
  dd19756
- Merge origin/main into quest/m1/auth/request-token
  kixelated
  committed
  4ff31b8
- style: format the credit-bound test
  
  committed
  df814ab
- fix(auth): hold announce subscriptions to the announce's token
  
  committed
  91a113c
- Merge origin/main into quest/m1/auth/request-token
  kixelated
  committed
  35e143d
- style: format the run_subscribe test callers
  
  committed
  89bac27
- fix(auth): an announce token must cover its whole namespace
  
  committed
  f5b7088

Commits

Commits on Oct 14, 2026

Commits on Oct 15, 2026