Push Tracker
Go to file
Push Tracker
ash pushed to main at qoherent/ria-ran--sim-drop 2026-07-01 23:17:22 -04:00
244a6ab05e note
Files 15 items
A ashkan@beigi.net 0b362bbd0b Harden: gate /api/export behind an admin token (closed by default)
/api/export returns every subscriber's Ki/OPc and was reachable unauthenticated
by any WiFi client (and directly, since Flask binds 0.0.0.0). It now requires
server.admin_token via the X-Admin-Token header (constant-time compare) and is
disabled entirely when no token is configured.

Add admin_token to config.yaml.example. Tests: +2 (disabled/401/200); 86 pass.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-01 22:01:59 +00:00
android Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
configs Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
plan Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
portal Harden: concurrency safety (db lock timeout, cache lock, retry, portal) 2026-07-01 06:16:25 +00:00
scripts Harden deployment: DB ownership and config secrecy 2026-07-01 21:59:27 +00:00
server Harden: gate /api/export behind an admin token (closed by default) 2026-07-01 22:01:59 +00:00
systemd Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
tests Harden: gate /api/export behind an admin token (closed by default) 2026-07-01 22:01:59 +00:00
.gitattributes Initial commit 2026-07-01 01:40:49 -04:00
.gitignore Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
CHANGELOG.md Harden: gate /api/export behind an admin token (closed by default) 2026-07-01 22:01:59 +00:00
claude.md Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
config.yaml.example Harden: gate /api/export behind an admin token (closed by default) 2026-07-01 22:01:59 +00:00
README.md Initial commit 2026-07-01 01:40:49 -04:00
requirements.txt Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00

ria-ran--sim-drop