decentraland / world-storage-service
99%
main: 99%

LAST BUILD BRANCH: 1.6.0
DEFAULT BRANCH: main
Repo Added
Files 58
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH 1.6.0
branch: SELECT
CHANGE BRANCH
x

coverage: 98.68%. Remained the same
Relevant lines Covered
1153 RELEVANT LINES 1146 COVERED LINES
70.43 HITS PER LINE
Source Files on main

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
29354643191 1.6.0 feat: authorize scene-scoped storage delegations for env value reads (#113) env values are keyed by place_id = f(world, parcel) — the same scope the x-authoritative-scope claim pins — so GET /env/:key can accept a scene worker's world-scoped stor... push web-flow github
98.68
29354048524 main feat: authorize scene-scoped storage delegations for env value reads (#113) env values are keyed by place_id = f(world, parcel) — the same scope the x-authoritative-scope claim pins — so GET /env/:key can accept a scene worker's world-scoped stor... push web-flow github
98.68
29352955722 feat/env-scoped-storage-delegation feat: authorize scene-scoped storage delegations for env value reads env values are keyed by place_id = f(world, parcel) — the same scope the x-authoritative-scope claim pins — so GET /env/:key can accept a scene worker's world-scoped storage del... Pull #113 LautaroPetaccio github
98.68
29270565013 1.5.0 feat: authorize world-scoped authoritative storage delegations (#112) * feat: authorize world-scoped authoritative storage delegations Adds an additive authorization path for /values/* so an authoritative scene server can read/write a world's st... push web-flow github
98.68
28960364948 main feat: authorize world-scoped authoritative storage delegations (#112) * feat: authorize world-scoped authoritative storage delegations Adds an additive authorization path for /values/* so an authoritative scene server can read/write a world's st... push web-flow github
98.68
28907443724 feat/scoped-storage-delegation refactor: encapsulate the signature check; document confinement model (review round 3) #4: extract isPersonalSignatureBy(address, message, signature) so the synthetic [SIGNER, ECDSA_PERSONAL_SIGNED_ENTITY] auth-chain trick is contained behind a c... Pull #112 LautaroPetaccio github
98.68
28898748893 feat/scoped-storage-delegation fix: harden storage delegation verification (review round 2) B1: guard a JSON 'null'/primitive payload before destructuring — previously threw a TypeError out of verifyStorageDelegation (attacker-triggerable 500, and broke owner/deployer fall-thr... Pull #112 LautaroPetaccio github
98.74
28895412237 feat/scoped-storage-delegation feat: enforce scene scope on storage delegations; guard header size Security review F2/F5: verifyStorageDelegation now takes a target { signer, world, sceneId, parcel, trustedSigners } and requires the claim's sceneId == the request's scene and p... Pull #112 LautaroPetaccio github
98.53
28891675888 feat/scoped-storage-delegation chore: fix eslint (prettier, import order, interface types, typed auth chain) Pull #112 LautaroPetaccio github
98.57
28891028092 feat/scoped-storage-delegation fix: restrict storage scope-claim signers to the authoritative address; cover the scoped path Least authority: a scope claim is trusted only when signed by AUTHORITATIVE_SERVER_ADDRESS, not by every AUTHORIZED_ADDRESSES entry. Add middleware-leve... Pull #112 LautaroPetaccio github
98.57
See All Builds (168)