bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

Require current node possession proof

Browse source
This commit is contained in:
冰朔 2026-08-10 08:00:53 +08:00
commit 64062fadac
10 changed files with 417 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

23
product-source/guanghu-knowledge-base/server/domain-access.test.ts
View file

@ -147,21 +147,21 @@ function snapshotLoader(readRegistry: () => unknown) {
}
test('a local workspace remains available without claiming domain runtime access', () => {
const status = evaluateDomainAccess({ accountVerified: false, domainId: 'DOM-FIFTH-0001', nodeId: '', nodeRegistrationVerified: false, nodeType: NODE_TYPE }, NOW);
const status = evaluateDomainAccess({ accountVerified: false, domainId: 'DOM-FIFTH-0001', nodeId: '', nodePossessionVerified: false, nodeRegistrationVerified: false, nodeType: NODE_TYPE }, NOW);
assert.equal(status.localWorkspaceAllowed, true);
assert.equal(status.runtimeReady, false);
assert.equal(status.stage, 'login-required');
});
test('a code-channel account cannot substitute for verified node registration', () => {
const status = evaluateDomainAccess({ accountVerified: true, domainId: 'DOM-FIFTH-0001', nodeId: 'JD-FD-PRIMARY', nodeRegistrationVerified: false, nodeType: NODE_TYPE }, NOW);
const status = evaluateDomainAccess({ accountVerified: true, domainId: 'DOM-FIFTH-0001', nodeId: 'JD-FD-PRIMARY', nodePossessionVerified: false, nodeRegistrationVerified: false, nodeType: NODE_TYPE }, NOW);
assert.equal(status.stage, 'login-required');
assert.equal(status.blockers.includes('account_identity_missing'), false);
assert.ok(status.blockers.includes('verified_node_registration_missing'));
});
test('a separately verified node is still not a domain runtime session', () => {
const status = evaluateDomainAccess({ accountVerified: true, domainId: 'DOM-FIFTH-0001', nodeId: 'JD-FD-PRIMARY', nodeRegistrationVerified: true, nodeType: NODE_TYPE }, NOW);
const status = evaluateDomainAccess({ accountVerified: true, domainId: 'DOM-FIFTH-0001', nodeId: 'JD-FD-PRIMARY', nodePossessionVerified: true, nodeRegistrationVerified: true, nodeType: NODE_TYPE }, NOW);
assert.equal(status.stage, 'identity-verified');
assert.deepEqual(status.blockers, [
'verified_domain_manifest_missing',
@ -170,12 +170,26 @@ test('a separately verified node is still not a domain runtime session', () => {
]);
});
test('a signed registration without a current private-key proof remains login-required', () => {
const status = evaluateDomainAccess({
accountVerified: true,
domainId: 'DOM-FIFTH-0001',
nodeId: 'JD-FD-PRIMARY',
nodePossessionVerified: false,
nodeRegistrationVerified: true,
nodeType: NODE_TYPE,
}, NOW);
assert.equal(status.stage, 'login-required');
assert.ok(status.blockers.includes('verified_node_possession_missing'));
});
test('runtime access requires matching manifest, scoped capability and online receipt', () => {
const handoff = parseDomainAccessHandoff(validHandoff, 'DOM-FIFTH-0001', 'LOCAL-001', NODE_TYPE, trustedSigner, NOW);
const status = evaluateDomainAccess({
accountVerified: true,
domainId: 'DOM-FIFTH-0001',
nodeId: 'LOCAL-001',
nodePossessionVerified: true,
nodeRegistrationVerified: true,
nodeType: NODE_TYPE,
...handoff,
@ -203,6 +217,7 @@ test('the runtime handoff entry resolves its signer only from a loaded snapshot'
accountVerified: true,
domainId: 'DOM-FIFTH-0001',
nodeId: 'LOCAL-001',
nodePossessionVerified: true,
nodeRegistrationVerified: true,
nodeType: NODE_TYPE,
...verified.handoff,
@ -270,6 +285,7 @@ test('mismatched or expired evidence fails closed', () => {
domainId: 'DOM-FIFTH-0001',
manifest: verifiedHandoff.manifest,
nodeId: 'LOCAL-001',
nodePossessionVerified: true,
nodeRegistrationVerified: true,
nodeType: NODE_TYPE,
sessionCapability: { capabilityId: 'CAP-001', domainId: 'DOM-FIFTH-0001', expiresAt: NOW, nodeId: 'LOCAL-001', nodeType: NODE_TYPE, scopes: ['domain:enter'] },
@ -343,6 +359,7 @@ test('copying verified-looking fields cannot bypass the in-process verifier boun
verifierReceipt: { ...verifiedHandoff.manifest.verifierReceipt },
},
nodeId: 'LOCAL-001',
nodePossessionVerified: true,
nodeRegistrationVerified: true,
nodeType: NODE_TYPE,
sessionCapability: verifiedHandoff.sessionCapability,