Skip to content

feat(telemetry): sign requests with HMAC-SHA256 - #179

Merged
BryanFRD merged 1 commit into
mainfrom
feat/hmac-telemetry-auth
Mar 31, 2026
Merged

BryanFRD merged 1 commit into
mainfrom
feat/hmac-telemetry-auth

Conversation

@BryanFRD

Copy link
Copy Markdown
Contributor

Summary

  • Sign all telemetry requests with HMAC-SHA256 (X-Timestamp + X-Signature headers)
  • Add hmac 0.13 as optional CLI dependency
  • Set FERRFLOW_HMAC_SECRET env in CI (clippy, test, coverage) and release workflows

Pairs with the API-side middleware merged in FerrFlow-Org/Application (api@v1.2.0) and the Vault/K8s secret already deployed.

Closes #179

@codecov

codecov Bot commented Mar 31, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 0% with 17 lines in your changes missing coverage. Please review.

Files with missing lines Patch % Lines
src/telemetry.rs 0.00% 17 Missing ⚠️

📢 Thoughts on this report? Let us know!

@BryanFRD
BryanFRD merged commit a89e8c7 into main Mar 31, 2026
10 of 11 checks passed
@BryanFRD
BryanFRD deleted the feat/hmac-telemetry-auth branch March 31, 2026 10:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant