laantungir/n_signer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 40 Wiki Activity

v0.0.41 - Fix activity log label for index whitelist denials — shows 'DENIED:index-not-approved' instead of 'DENIED:no-match'

Browse Source
This commit is contained in:
Laan Tungir
2026-07-11 13:57:13 -04:00
parent 10208e5fac
commit 478c3a569e
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/main.c
View File

@@ -503,8 +503,8 @@ int socket_name_random(char *out, size_t out_len);
/* Version information (auto-updated by build/version tooling) */ /* Version information (auto-updated by build/version tooling) */
#define NSIGNER_VERSION_MAJOR 0 #define NSIGNER_VERSION_MAJOR 0
#define NSIGNER_VERSION_MINOR 0 #define NSIGNER_VERSION_MINOR 0
#define NSIGNER_VERSION_PATCH 40 #define NSIGNER_VERSION_PATCH 41
#define NSIGNER_VERSION "v0.0.40" #define NSIGNER_VERSION "v0.0.41"
/* NSIGNER_HEADERLESS_DECLS_END */ /* NSIGNER_HEADERLESS_DECLS_END */

5
src/server.c
View File

@@ -1680,7 +1680,7 @@ int server_handle_one(server_ctx_t *ctx, server_activity_cb cb, void *cb_data) {
response = strdup("{\"id\":\"null\",\"error\":{\"code\":2002,\"message\":\"index_not_allowed\"}}"); response = strdup("{\"id\":\"null\",\"error\":{\"code\":2002,\"message\":\"index_not_allowed\"}}");
pchk = POLICY_DENY; pchk = POLICY_DENY;
verdict = "DENIED"; verdict = "DENIED";
source_label = "index-whitelist"; source_label = "index-not-approved";
hard_selector_error = -100; /* sentinel: skip policy_check */ hard_selector_error = -100; /* sentinel: skip policy_check */
} }
@@ -1778,6 +1778,9 @@ int server_handle_one(server_ctx_t *ctx, server_activity_cb cb, void *cb_data) {
source_label = "session-grant"; source_label = "session-grant";
} else if (pchk == POLICY_ALLOW) { } else if (pchk == POLICY_ALLOW) {
source_label = "prompt"; source_label = "prompt";
} else if (hard_selector_error == -100) {
/* Index whitelist denial — keep the label set by the whitelist check */
/* source_label already set to "index-not-approved" above */
} else { } else {
source_label = "no-match"; source_label = "no-match";
} }