Security/review 2 #8

2026-10-28T16:46:42-05:00

iamdoubz commented

2026-10-28 16:46:42 -05:00

No description provided.

iamdoubz added 4 commits 2026-10-28 16:46:42 -05:00

security: sign-in by email and connecting accounts (08 §7 #1 #2 #5 #8 ) 1db5aa22dc

Matching by email skips admins and anyone with a connected account, in both
directions. A connected directory account is only swapped by an admin, and
an OpenID connect finishes only in the browser whose session asked.

security: recordings, webhooks, Contrack tokens, probe (08 §7 #3 #4 #6 #7 ) db244b116a

A phone that only rang no longer gets a coworker's recording, transcript or
summary. The voicemail webhook leaves the transcript out. The saved Contrack
token only goes to its own address. The probe trusts X-Forwarded-For from a
local proxy only.

docs: security review 2 (08 §7) 958405651b

security: a key for the network test probe (08 §7 #9 )

ci / check (push) Successful in 1m13s

Details

ci / images (push) Successful in 4m2s

Details

ci / check (pull_request) Successful in 1m42s

Details

ci / images (pull_request) Successful in 28s

Details

60348cf0c5

Settings → Network makes a key, shown once and stored encrypted; the api sends
it to the probe as a Bearer token, and a new probe address drops it. A probe
with PROBE_KEY only answers that key. Without one it stays open, and
Diagnostics strongly recommends setting it.

iamdoubz merged commit 678d45e4f9 into main

2026-10-28 16:59:55 -05:00

iamdoubz deleted branch security/review-2

2026-10-28 16:59:55 -05:00

iamdoubz referenced this issue from a commit

2026-10-28 16:59:55 -05:00

security: sign-in by email and connecting accounts (08 §7 #1 #2 #5 #8)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: spng/selfphoneng#8