code wiki / (root) / nx_mgmt_session_mint_gate.nx

nx_mgmt_session_mint_gate.nx

buildroot/runtime/nx_mgmt_session_mint_gate.nx

4678 B90 linesdepth 13pulls 39 transitivereach 0 importersview sourcekind gate/prooftopic mgmt
docsdependenciesstructsconstsfunctions

about

nx_mgmt_session_mint_gate.nx -- proves the session minter: a token minted by msm_mint_raw (loading ed_priv from a real nx_uas key bundle) VALIDATES against the canonical nx_ncs_validate_token (the exact check the daemon runs), resolves to the correct uid_hash, and FAILS closed on expiry / tamper / wrong-realm. The is_admin resolution is proven separately by the live /api/services test (needs the NAS roles+index). license_tier: ORIGINAL expect_exit: 0

dependencies 3 imports · 0 importers

nx_session_mint_lib.nx nx_user_account_store.nx nx_gate.nx nx_mgmt_session_mint_gate.nx

imports: nx_session_mint_lib.nxnx_user_account_store.nxnx_gate.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main gw sys_write nx_uas_server_keys_load_or sys_mmap sys_read_file sys_openat_rd sys_lseek sys_mmap ↻ sys_read sys_close _uas_hex_dec _uas_nib nx_csprng_fill sys_mmap ↻ nx_csprng_urandom_path sys_openat_rd ↻ sys_read ↻ sys_close ↻ nx_opq_derive_keypair sys_mmap ↻ _voprf_load_context_string u256_alloc nx_scratch nx_scratch_init sys_mmap ↻ nx_scratch_oom sys_write ↻ sys_exit sys_mmap ↻ nx_opq_hash_to_scalar sys_mmap ↻ nx_h2c_expand_message_xmd_ sys_mmap ↻ _h2c_i2osp_1 _h2c_i2osp_2 u256_alloc ↻ _opq_reduce_48be_mod_n u256_alloc ↻ sys_mmap ↻

structs

none

consts

none

functions

9func mg_eqbytes(a: *u8, b: *u8, n: i64) -> i64 { var i: i64 = 0; while i < n { if a[i] != b[i] { return 0 } i = i + 1 } return 1 }
called by 1: main
10func mg_expect(cond: i64, pass: *i64, tot: *i64, label: *u8) -> i64
called by 1: main calls 1: gw
17func main() -> i64
calls 10: gwnx_uas_server_keys_load_or_initmg_expectmsm_load_edprivmg_eqbytesmsm_mint_raw+4