feat(protocol): bind tunnel admission to device proof

2026-07-29 10:32:08 +07:00
parent be709724ba
commit 4a2772c053
10 changed files with 138 additions and 14 deletions
@@ -406,7 +406,7 @@
    "TunnelAdmissionRequest": {
      "type": "object",
      "additionalProperties": false,
-      "required": ["version", "session_id", "gateway_id", "audience", "grant", "reconnect_sequence", "client_nonce", "capabilities"],
+      "required": ["version", "session_id", "gateway_id", "audience", "grant", "reconnect_sequence", "client_nonce", "device_signature", "capabilities"],
      "properties": {
        "version": {"type": "string", "const": "1"},
        "session_id": {"type": "string", "minLength": 1, "maxLength": 128},
@@ -415,6 +415,7 @@
        "grant": {"type": "string", "minLength": 43, "maxLength": 256},
        "reconnect_sequence": {"type": "integer", "minimum": 0},
        "client_nonce": {"type": "string", "minLength": 16, "maxLength": 128},
+        "device_signature": {"type": "string", "minLength": 86, "maxLength": 86},
        "capabilities": {"$ref": "#/$defs/CapabilityProfile"}
      }
    },