feat: machine binding and version enforcement

Browse Source

migration 017 adds machine_id to agents table
middleware validates X-Machine-ID header on authed routes
agent client sends machine ID with requests
MIN_AGENT_VERSION config defaults 0.1.22
version utils added for comparison

blocks config copying attacks via hardware fingerprint
old agents get 426 upgrade required
breaking: <0.1.22 agents rejected

...

This commit is contained in:

Fimeg

2025-11-02 09:30:04 -05:00

parent 99480f3fe3

commit ec3ba88459

48 changed files with 3811 additions and 122 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

aggregator-agent/test-redflag-agent Executable file

Binary file not shown.