A ashkan@beigi.net f367103ceb Harden: capability-token profile URLs, fast core failure, config validation ... Security: - Serve generated profiles at /api/profile/<random-token> instead of /api/profile/<sequential-int>. Profiles carry Ki/OPc, so the enumerable id scheme allowed anyone on the WiFi to harvest all subscriber keys. Unknown tokens return a plain 404 so they can't be probed. Robustness: - Open5GS/free5gc adapters use short MongoDB timeouts so an unreachable core fails provisioning fast instead of blocking ~30s on the default. - Profile cache is now a size-capped LRU (OrderedDict) to prevent unbounded memory growth. - load_config rejects empty/non-mapping YAML and validates network.op_key is a 16-byte hex string. Tests: +25 (test_app.py API coverage, test_utils.py); 78 pass. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>			2026-07-01 06:11:14 +00:00
..
__init__.py		Add Phase-1 eSIM provisioning implementation	2026-07-01 05:56:31 +00:00
test_app.py		Harden: capability-token profile URLs, fast core failure, config validation	2026-07-01 06:11:14 +00:00
test_core_adapters.py		Add Phase-1 eSIM provisioning implementation	2026-07-01 05:56:31 +00:00
test_database.py		Add Phase-1 eSIM provisioning implementation	2026-07-01 05:56:31 +00:00
test_profile_generator.py		Phase 2: real 3GPP profile encodings + changelog	2026-07-01 06:03:48 +00:00
test_utils.py		Harden: capability-token profile URLs, fast core failure, config validation	2026-07-01 06:11:14 +00:00