qoherent/ria-ran--sim-drop
23
0
Fork 0
Code Issues Pull Requests Workflows Packages Projects Releases Wiki Activity
4 Commits 1 Branch 0 Tags 220 KiB
Python 81.9%
Shell 9.9%
CSS 2.7%
JavaScript 2.1%
HTML 2%
Other 1.4%
Push Tracker
Go to file
Push Tracker
ash pushed to main at qoherent/ria-ran--sim-drop 2026-07-01 23:17:22 -04:00
244a6ab05e note
Files 15 items
A ashkan@beigi.net f367103ceb Harden: capability-token profile URLs, fast core failure, config validation 
Security:
- Serve generated profiles at /api/profile/<random-token> instead of
  /api/profile/<sequential-int>. Profiles carry Ki/OPc, so the enumerable id
  scheme allowed anyone on the WiFi to harvest all subscriber keys. Unknown
  tokens return a plain 404 so they can't be probed.

Robustness:
- Open5GS/free5gc adapters use short MongoDB timeouts so an unreachable core
  fails provisioning fast instead of blocking ~30s on the default.
- Profile cache is now a size-capped LRU (OrderedDict) to prevent unbounded
  memory growth.
- load_config rejects empty/non-mapping YAML and validates network.op_key is a
  16-byte hex string.

Tests: +25 (test_app.py API coverage, test_utils.py); 78 pass.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-01 06:11:14 +00:00
android Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
configs Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
plan Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
portal Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
scripts Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
server Harden: capability-token profile URLs, fast core failure, config validation 2026-07-01 06:11:14 +00:00
systemd Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
tests Harden: capability-token profile URLs, fast core failure, config validation 2026-07-01 06:11:14 +00:00
.gitattributes Initial commit 2026-07-01 01:40:49 -04:00
.gitignore Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
CHANGELOG.md Harden: capability-token profile URLs, fast core failure, config validation 2026-07-01 06:11:14 +00:00
claude.md Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00
config.yaml.example Phase 2: real 3GPP profile encodings + changelog 2026-07-01 06:03:48 +00:00
README.md Initial commit 2026-07-01 01:40:49 -04:00
requirements.txt Add Phase-1 eSIM provisioning implementation 2026-07-01 05:56:31 +00:00

README.md

ria-ran--sim-drop