Skip to content

fix: address issues #736, #734, #735, #737 - #770

Merged
meshackyaro merged 2 commits into
trustflow-protocol:mainfrom
greyforreal:fix/issues-734-735-736-737
Oct 18, 2026
Merged

meshackyaro merged 2 commits into
trustflow-protocol:mainfrom
greyforreal:fix/issues-734-735-736-737

Conversation

@greyforreal

Copy link
Copy Markdown
Contributor

Closes #736
Fix missing imports in AuthService

  • Added RefreshTokenStoreService and ACCESS_TOKEN_TTL_SECONDS imports
  • Resolves TS2304 compilation errors
  • All dependent specs should now pass

Closes #734
Add provider health reset endpoint

  • New POST /ipfs/providers/:name/health/reset endpoint (admin-guarded)
  • Calls resetProviderHealth() to clear accumulated metrics
  • Allows providers to recover from FAILED status

Closes #735
Document CID computation limitation

  • Added comprehensive documentation about single-block assumption
  • Documents known size thresholds and chunking behavior
  • Explains mismatch risks for files > 256KB
  • Suggests mitigation strategies for future work

Closes #737
Implement refresh token family revocation on reuse

  • Added tombstone system to detect already-rotated tokens
  • Calls revokeTokenFamily() when token reuse is detected
  • 5-minute tombstone window to catch replay attacks
  • Protects against stolen refresh token replay

…rustflow-protocol#735, trustflow-protocol#737

- trustflow-protocol#736: Fix missing imports in AuthService
  - Added RefreshTokenStoreService and ACCESS_TOKEN_TTL_SECONDS imports
  - Resolves TS2304 compilation errors
  - All dependent specs should now pass

- trustflow-protocol#734: Add provider health reset endpoint
  - New POST /ipfs/providers/:name/health/reset endpoint (admin-guarded)
  - Calls resetProviderHealth() to clear accumulated metrics
  - Allows providers to recover from FAILED status

- trustflow-protocol#735: Document CID computation limitation
  - Added comprehensive documentation about single-block assumption
  - Documents known size thresholds and chunking behavior
  - Explains mismatch risks for files > 256KB
  - Suggests mitigation strategies for future work

- trustflow-protocol#737: Implement refresh token family revocation on reuse
  - Added tombstone system to detect already-rotated tokens
  - Calls revokeTokenFamily() when token reuse is detected
  - 5-minute tombstone window to catch replay attacks
  - Protects against stolen refresh token replay
@drips-wave

drips-wave Bot commented Oct 18, 2026

Copy link
Copy Markdown

@greyforreal Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@meshackyaro
meshackyaro merged commit 94cddb0 into trustflow-protocol:main Oct 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment