KKRainbow 9f231ee76c refactor(credentials): centralize grant policy (#2517) ...

* refactor(credentials): centralize grant policy

Represent ACL groups, relay permission, proxy CIDRs, and reuse as one
internal credential grant shared by generated, imported, managed, and
attached credentials. Normalize proxy CIDRs at construction while
preserving the flat credential storage schema.

Reuse one managed credential adapter for protobuf/TOML projection and
patching so defaults and future fields have a single mapping authority.

* fix(credentials): normalize grants loaded from storage

Run persisted grants through the same CIDR normalization used by new and
managed credentials. Reject invalid stored CIDRs through the existing
storage-unavailable path and include the credential ID in the error.

Cover whitespace migration and invalid legacy data with regression tests.

2026-08-22 23:55:29 +08:00

..

src

refactor(credentials): centralize grant policy (#2517)

2026-08-22 23:55:29 +08:00

testdata

refactor(core): separate portable core from native runtime (#2451)

2026-07-26 15:41:55 +08:00

tests

refactor(core): separate portable core from native runtime (#2451)

2026-07-26 15:41:55 +08:00

Cargo.toml

feat(mini): add compact native EasyTier client (#2479)

2026-08-09 19:43:30 +08:00