cjkas 97d8a90da8 fix: review findings on the token key ... - Load the token key in Web::startup(), before either web server starts, so no token can be made with the all-zero key; log a failed pref.begin(). - createAPIToken checks mbedtls' return codes. On a failure it leaves the token empty, which tokenMatches never accepts, instead of hex from uninitialised stack. - API_TOKEN_SIZE in ApiToken.h replaces the five char[65] buffers; the HMAC's description moves to createAPIToken, with the None form. - handleLogin builds the candidate token once and compares it once. - e2e: the serverId test skips on `secured` like its neighbours, names its values, and says it assumes the device sees this PC's address. - KNOWN_ISSUES keeps #81, which #108 removes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>		2026-10-27 20:39:08 +01:00
..
adr	fix: review findings on the login throttle	2026-10-27 18:44:39 +01:00
KNOWN_ISSUES.md	fix: review findings on the token key	2026-10-27 20:39:08 +01:00
NICE_TO_HAVE.md	docs: add agent testing instructions and the RMT transmit idea	2026-10-16 09:11:17 +02:00
PROTOCOL.md	fix: drop Secure Config Only permissions from protocol 2	2026-10-25 11:11:19 +01:00
SECURITY_PLAN.md	feat: sign tokens with a secret key, compare them in constant time	2026-10-27 19:41:43 +01:00