dohertj2/mxaccessgw
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Implement API Key Hashing And Verification #6

New Issue
Closed
opened 2026-04-26 15:22:28 -04:00 by dohertj2 · 2 comments
dohertj2 commented 2026-04-26 15:22:28 -04:00
Owner
Copy Link
Copy Source

Source: $file
Milestone: $currentMilestone

Labels: area:auth, type:feature, priority:p0

Deliverables:

  • parse mxgw_<key-id>_<secret> format,
  • HMAC-SHA256 with gateway-local pepper or accepted Argon2id dependency,
  • constant-time hash comparison,
  • key id/display name/scopes identity model.

Acceptance criteria:

  • raw secrets are never stored,
  • malformed keys fail unauthenticated,
  • valid keys authenticate,
  • revoked keys fail.

Tests:

  • parse tests,
  • hash verification,
  • redaction,
  • scope extraction.
Source: $file Milestone: $currentMilestone Labels: `area:auth`, `type:feature`, `priority:p0` Deliverables: - parse `mxgw_<key-id>_<secret>` format, - HMAC-SHA256 with gateway-local pepper or accepted Argon2id dependency, - constant-time hash comparison, - key id/display name/scopes identity model. Acceptance criteria: - raw secrets are never stored, - malformed keys fail unauthenticated, - valid keys authenticate, - revoked keys fail. Tests: - parse tests, - hash verification, - redaction, - scope extraction.
dohertj2 added this to the gateway-auth milestone 2026-04-26 15:22:28 -04:00
dohertj2 added the area:authtype:featurepriority:p0 labels 2026-04-26 15:22:28 -04:00
dohertj2 added a new dependency 2026-04-26 15:28:32 -04:00
#5 Implement SQLite Auth Store And Migrations
dohertj2 added a new dependency 2026-04-26 15:28:33 -04:00
#7 Implement Local API Key Admin CLI
dohertj2 added a new dependency 2026-04-26 15:28:33 -04:00
#8 Add gRPC Authentication And Scope Authorization
dohertj2 commented 2026-04-26 16:35:20 -04:00
Author
Owner
Copy Link
Copy Source

Worker 2 is taking this issue.

Branch: agent-2/issue-6-implement-api-key-hashing-and-verification
Worktree: C:\Users\dohertj2\Desktop\mxaccessgw-agent-2

Worker 2 is taking this issue. Branch: agent-2/issue-6-implement-api-key-hashing-and-verification Worktree: C:\Users\dohertj2\Desktop\mxaccessgw-agent-2
dohertj2 commented 2026-04-26 16:46:36 -04:00
Author
Owner
Copy Link
Copy Source

Implemented and merged via PR #59: #59

Commit: 696be17
Merge commit on main: 3b3e41acf4
Branch: agent-2/issue-6-implement-api-key-hashing-and-verification

Verification:

  • dotnet build src\MxGateway.sln passed with 0 warnings and 0 errors.
  • dotnet test src\MxGateway.sln passed: 76 total tests.

Acceptance criteria verified: malformed keys fail, valid keys verify against stored hashes, revoked keys fail, redaction avoids leaking raw secrets, and scope extraction is covered by focused tests.

Implemented and merged via PR #59: https://gitea.dohertylan.com/dohertj2/mxaccessgw/pulls/59 Commit: 696be17 Merge commit on main: 3b3e41acf454eb5e81d353754409ce151a8e25a4 Branch: agent-2/issue-6-implement-api-key-hashing-and-verification Verification: - dotnet build src\\MxGateway.sln passed with 0 warnings and 0 errors. - dotnet test src\\MxGateway.sln passed: 76 total tests. Acceptance criteria verified: malformed keys fail, valid keys verify against stored hashes, revoked keys fail, redaction avoids leaking raw secrets, and scope extraction is covered by focused tests.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area:auth
Authentication and authorization
 area:client-dotnet
.NET client library
 area:client-go
Go client library
 area:client-java
Java client library
 area:client-python
Python client library
 area:client-rust
Rust client library
 area:contracts
Protocol and generated contract work
 area:dashboard
Blazor dashboard work
 area:docs
Documentation
 area:gateway
Gateway server work
 area:tests
Automated and live tests
 area:worker
MXAccess worker process work
 blocked
Blocked by dependency
 priority:p0
Must-have / blocking
 priority:p1
High priority
 priority:p2
Normal priority
 type:docs
Documentation work
 type:feature
Feature implementation
 type:infra
Infrastructure and scaffolding
 type:test
Test work
No Label area:auth priority:p0 type:feature
Milestone
No items
No Milestone gateway-auth
Projects
Clear projects
No project
Assignees
Clear assignees
dohertj2 (dohertj2)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Blocks
#7 Implement Local API Key Admin CLI
dohertj2/mxaccessgw
#8 Add gRPC Authentication And Scope Authorization
dohertj2/mxaccessgw
Depends on
#5 Implement SQLite Auth Store And Migrations
dohertj2/mxaccessgw
Reference: dohertj2/mxaccessgw#6
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?