Skip to content

Prevent token nonce reuse across different requests - #3

Open
g105b wants to merge 1 commit into
masterfrom
fix/prevent-token-nonce-reuse
Open

g105b wants to merge 1 commit into
masterfrom
fix/prevent-token-nonce-reuse

Conversation

@g105b

@g105b g105b commented Nov 5, 2026

Copy link
Copy Markdown
Member

Bind each token to one request and reject different payloads. Preserve the binding in sessions and keep identical retries working. Older tokens can still decrypt responses.

Add regression tests, including concurrent requests. All 96 local tests and formatting checks pass.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant