bind offer completion to the negotiating key: negotiated_fp on offer_tokens (schema.sql + idempotent migration), recorded at negotiate, checked at complete -> 403 offer_key_mismatch; NULL-fp tokens rejected as expired; regression test (v1.56.121)
$ koh steal kepr.uk/kepr@e2d2d2dc0477
·
parent: 272e70303290
discussion
log in to leave a comment.