External/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-08-18 06:50:31 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(auth): raise bounded audit capacity

Browse Source 
Cumulative PR layer #3564. Raises the reviewed hard audit ceilings and retains the exact successor-boundary regression.

Neighbor disclosure: the provider-neutral foundation and public dependency sources remain owned by #1476; lifecycle and canonical admission remain in #4772.

Signed-off-by: Cea Stapleton Cordasco <261786559+cea@users.noreply.github.com>
This commit is contained in:
Cea Stapleton Cordasco
2026-08-12 11:20:11 -05:00
parent 1f5cc1071f
commit 200768dafe
1 changed files with 32 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/buzz-auth/src/foundation.rs
+32 -9
View File
@@ -22,11 +22,11 @@ use thiserror::Error;
use uuid::Uuid;
/// Hard implementation ceiling for one domain's retained audit events.
pub const HARD_MAX_AUTHORIZATION_EVENTS_PER_DOMAIN: u64 = 10_000;
pub const HARD_MAX_AUTHORIZATION_EVENTS_PER_DOMAIN: u64 = 1_000_000;
/// Hard implementation ceiling for one domain's retained canonical bytes.
pub const HARD_MAX_AUTHORIZATION_EVENT_BYTES_PER_DOMAIN: u64 = 16 << 20;
pub const HARD_MAX_AUTHORIZATION_EVENT_BYTES_PER_DOMAIN: u64 = 4_294_967_296;
/// Hard implementation ceiling for one canonical event envelope.
pub const HARD_MAX_AUTHORIZATION_EVENT_ENVELOPE_BYTES: u32 = 16 << 10;
pub const HARD_MAX_AUTHORIZATION_EVENT_ENVELOPE_BYTES: u32 = 65_536;
/// Minimal stock NIP-FI operating modes.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
@@ -2484,26 +2484,49 @@ mod tests {
AuthorizationAuditConfig::new(NipFiMode::Off, Some(fixture)),
Err(AuthorizationAuditConfigError::UnexpectedEventCapacity)
);
}
#[test]
fn audit_capacity_accepts_exact_hard_maxima_and_rejects_each_successor() {
let exact_maxima = AuthorizationEventCapacityPolicy::new(
HARD_MAX_AUTHORIZATION_EVENTS_PER_DOMAIN,
HARD_MAX_AUTHORIZATION_EVENT_BYTES_PER_DOMAIN,
HARD_MAX_AUTHORIZATION_EVENT_ENVELOPE_BYTES,
)
.unwrap();
assert_eq!(
exact_maxima.max_events_per_domain(),
HARD_MAX_AUTHORIZATION_EVENTS_PER_DOMAIN
);
assert_eq!(
exact_maxima.max_bytes_per_domain(),
HARD_MAX_AUTHORIZATION_EVENT_BYTES_PER_DOMAIN
);
assert_eq!(
exact_maxima.max_envelope_bytes(),
HARD_MAX_AUTHORIZATION_EVENT_ENVELOPE_BYTES
);
assert_eq!(
AuthorizationEventCapacityPolicy::new(
HARD_MAX_AUTHORIZATION_EVENTS_PER_DOMAIN + 1,
16 << 20,
16 << 10,
HARD_MAX_AUTHORIZATION_EVENT_BYTES_PER_DOMAIN,
HARD_MAX_AUTHORIZATION_EVENT_ENVELOPE_BYTES,
),
Err(AuthorizationEventCapacityPolicyError::EventCount)
);
assert_eq!(
AuthorizationEventCapacityPolicy::new(
10_000,
HARD_MAX_AUTHORIZATION_EVENTS_PER_DOMAIN,
HARD_MAX_AUTHORIZATION_EVENT_BYTES_PER_DOMAIN + 1,
16 << 10,
HARD_MAX_AUTHORIZATION_EVENT_ENVELOPE_BYTES,
),
Err(AuthorizationEventCapacityPolicyError::DomainBytes)
);
assert_eq!(
AuthorizationEventCapacityPolicy::new(
10_000,
16 << 20,
HARD_MAX_AUTHORIZATION_EVENTS_PER_DOMAIN,
HARD_MAX_AUTHORIZATION_EVENT_BYTES_PER_DOMAIN,
HARD_MAX_AUTHORIZATION_EVENT_ENVELOPE_BYTES + 1,
),
Err(AuthorizationEventCapacityPolicyError::EnvelopeBytes)