code wiki / _hdl_build / nx_login_gate_gate.nx

nx_login_gate_gate.nx

buildroot/runtime/_hdl_build/nx_login_gate_gate.nx

6219 B112 linesdepth 9pulls 12 transitivereach 0 importersview sourcekind gate/prooftopic login
docsdependenciesstructsconstsfunctions

about

nx_login_gate_gate.nx -- ★NISHI LOGIN Phase-1 keystone: the UNIFIED multi-modal auth gate proven end to end. Mints a REAL scoped ocap cap (capt_issue, HMAC-SHA256 signed) for scope "git", then asserts login_gate_cap authorizes it through ALL THREE wire forms a client can present -- X-Nishi-Cap header, Authorization: Bearer, and git/curl Authorization: Basic <user:cap> -- and correctly DENIES wrong-scope, tampered, expired, and absent credentials, while a "*" wildcard cap authorizes any scope. This is the shared validator behind the edge auth= switch and the git gate. GREEN => one sovereign credential, three presentations, fail-closed. license_tier: ORIGINAL expect_exit: 0

dependencies 4 imports · 0 importers

nx_syscalls.nx nx_cap_token.nx nx_base64.nx nx_login_gate.nx nx_login_gate_gate.nx

imports: nx_syscalls.nxnx_cap_token.nxnx_base64.nxnx_login_gate.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main hw sys_write sys_mmap capt_issue capt_payload capt_catb capt_catn signed_cookie_sign sc_sign_bytes sys_mmap ↻ hmac_sha256 sys_mmap ↻ sha256_digest sys_mmap ↻ sha256_init sha256_update sha256_final sha256_init ↻ sha256_update ↻ sha256_final ↻ b64_encode b64_enc_char pn sys_mmap ↻ sys_write ↻ mkreq apps app expect hw ↻ pn ↻ login_gate_cap sys_mmap ↻ lg_extract_cap sys_mmap ↻ lg_header lg_ci_eq lg_ci_eq ↻ basic_auth_decode

structs

none

consts

none

functions

12func hw(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 }
called by 2: expectmain calls 1: sys_write
13func pn(v: i64) -> i64 { let b: *u8 = sys_mmap(32) as *u8; var x: i64 = v; var ng: i64 = 0; if x < 0 { ng = 1; x = 0 - x } var i: i64 = 31; if x == 0 { b[i] = 48 as u8; i = i - 1 } while x > 0 { b[i] = (48 + x % 10) as u8; x = x / 10; i = i - 1 } if ng == 1 { b[i] = 45 as u8; i = i - 1 } sys_write(1, (b as i64 + i + 1) as *u8, 31 - i); return 0 }
called by 2: expectmain calls 2: sys_mmapsys_write
16func apps(buf: *u8, off: i64, s: *u8) -> i64 { var i: i64 = 0; while s[i] != (0 as u8) { buf[off + i] = s[i]; i = i + 1 } return off + i }
called by 1: mkreq
18func app(buf: *u8, off: i64, tok: *u8, len: i64) -> i64 { var i: i64 = 0; while i < len { buf[off + i] = tok[i]; i = i + 1 } return off + len }
called by 1: mkreq
21func expect(name: *u8, got: i64, want: i64, fails: *i64) -> i64
called by 1: main calls 2: hwpn
30func mkreq(r: *u8, prefix: *u8, tok: *u8, tl: i64) -> i64
called by 1: main calls 2: appsapp
38func main() -> i64
calls 8: hwsys_mmapcapt_issuepnmkreqexpect+2