Skip to content

fix: harden auth federation and test utilities - #816

Closed
devzubby wants to merge 1 commit into
Sorokit:mainfrom
devzubby:devzubby/sorokit-security-test-fixtures
Closed

fix: harden auth federation and test utilities#816
devzubby wants to merge 1 commit into
Sorokit:mainfrom
devzubby:devzubby/sorokit-security-test-fixtures

Conversation

@devzubby

@devzubby devzubby commented Oct 17, 2026

Copy link
Copy Markdown

Summary

  • enforce SEP-10 homeDomain consistency with the domain used for the Stellar TOML lookup
  • parse and validate federation memo query parameters and preserve memo data in resolved addresses
  • add fee_surge, rate_limited, slow_rpc, and degraded mock-server response modes with setResponseMode
  • validate Stellar BIP-44 derivation paths with an explicit advanced-use opt-out
  • add focused tests for all four behaviors

Verification

  • git diff --check passes
  • Local dependency installation was attempted but stalled in this environment; CI should run typecheck, lint, tests, and build.

Closes #770
Closes #777
Closes #776
Closes #773

@drips-wave

drips-wave Bot commented Oct 17, 2026

Copy link
Copy Markdown

@devzubby Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment