Skip to content

feat(asb): authenticate the JSON-RPC server with a hashed password#1099

Merged
binarybaron merged 2 commits into
masterfrom
feat/asb-rpc-auth
Jun 10, 2026
Merged

feat(asb): authenticate the JSON-RPC server with a hashed password#1099
binarybaron merged 2 commits into
masterfrom
feat/asb-rpc-auth

Conversation

@binarybaron

Copy link
Copy Markdown

No description provided.

Comment thread swap-env/src/rpc_auth.rs
Comment thread swap-env/src/rpc_auth.rs
@binarybaron binarybaron force-pushed the feat/asb-rpc-auth branch 4 times, most recently from 2c6e444 to e0f5fb7 Compare June 10, 2026 11:36

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit e0f5fb7. Configure here.

Comment thread swap-orchestrator/src/compose.rs Outdated
@binarybaron binarybaron force-pushed the feat/asb-rpc-auth branch 3 times, most recently from e554d98 to 3ef25ca Compare June 10, 2026 11:50
The ASB verifies a Bearer password against a salt:hmac HMAC-SHA256 verifier
read from --rpc-auth-file (mandatory when the RPC server is enabled).
asb-controller prompts for the password on startup and verifies before
granting access. The orchestrator gains a gen-rpc-auth command to produce
the keyfile and mounts it into the asb container.
@binarybaron binarybaron merged commit abf4676 into master Jun 10, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant