Add device and geo provider selection with the host-signal Edge Cookie provider - #1044

Open

jwrosewell wants to merge 60 commits into

IABTechLab:mainfrom

jwrosewell:split/2-device-geo

Commits on Sep 2, 2026

Add a pluggable Edge Cookie provider seam with the built-in HMAC provider
jwrosewell
committed
b740265
Accept the provider-code envelope on the partner-facing identifier paths
jwrosewell
committed
d2ad2a9
Rename the legacy passphrase migration so CodeQL stops tainting Settings
jwrosewell
committed
b2623cb
Stop serving without identity when a selected provider is unavailable
jwrosewell
committed
918f96c
Hold the deprecated EC passphrase to the same rules as the new block
jwrosewell
committed
61b7cf1
Reject unknown keys in the built-in HMAC provider block
jwrosewell
committed
5b01f98
Stop rather than run stateless when the hmac block is missing
jwrosewell
committed
7424932
Restore the missing line continuation in the mint rejection message
jwrosewell
committed
d6dc848
Give EdgeCookieProvider its own doc comment back
jwrosewell
committed
45ec829
Delete the unused ec::get_ec_id helper
jwrosewell
committed
c4c584c
Correct the provider module docs about when evidence arrives
jwrosewell
committed
5203c2d
Replace the scattered EC provider key strings with a typed selector
jwrosewell
committed
e44ff38
Reserve core's own response surface against provider effects
jwrosewell
committed
afdb7be
Dispatch partner-path identifier checks by provider code
jwrosewell
committed
e90b471
Let each provider decide whether it needs the client IP
jwrosewell
committed
3b74d74
State a real retirement condition for the legacy bare-identifier reader
jwrosewell
committed
29a3a7f
Key identity-graph reads and write-backs by the canonical form
jwrosewell
committed
cb62786
Egress only an Edge Cookie identifier the provider recognizes
jwrosewell
committed
fe23dcc
Record the cluster-count gap the identifier envelope opens
jwrosewell
committed
e3ba579
Consume the refused Report in the testlight egress tests
jwrosewell
committed
292df1f
Drop the request-evidence accessors that have no caller
jwrosewell
committed
a3a5d57
Collapse the EC provider selector to statelessness and a named provider
jwrosewell
committed
b70ddc0
Accumulate provider response headers instead of replacing the origin's
jwrosewell
committed
5da52c8
State what a provider switch really does to existing identities
jwrosewell
committed
67c3b0b
Name the design documents rather than their paths in doc comments
jwrosewell
committed
1f62e1a
Restore the line continuations missed in the neighbouring files
jwrosewell
committed
c7464bc
Correct the two provider doc comments the earlier pass missed
jwrosewell
committed
ef81e88
Stop a provider code from panicking when a vendor builds one at run time
jwrosewell
committed
acb416f
Refuse two Edge Cookie providers claiming the same name
jwrosewell
committed
8eb0a9b
Build the internal header list from the Edge Cookie response headers
jwrosewell
committed
f2b1825
Resolve the Edge Cookie provider once per request instead of twice
jwrosewell
committed
52e2692
Load Spin settings from the config store instead of a baked template
jwrosewell
committed
1c7df60
Stop exposing an inbound Edge Cookie identifier nothing has vouched for
jwrosewell
committed
3234092
Keep the whole request-evidence interface
jwrosewell
committed
1df8bf7
Documentation and house-style cleanup for the Edge Cookie provider PR
jwrosewell
committed
8a29373
Name the caching reason accurately in the reserved-header rejection
jwrosewell
committed
147a37b
Collapse Edge Cookie provider injection to a single seam
jwrosewell
committed
7dda9dd
Remove the orphaned no-client-IP test fixture
jwrosewell
committed
c16c99d
Add device and geo provider selection with the host-signal Edge Cookie provider
jwrosewell
committed
99b1acd
Omit an unset provider selector from the serialized config
jwrosewell
committed
20fee6a
Read the Cloudflare visitor region so US state opt-outs are honored
jwrosewell
committed
74047c1
Reunite the request-info builders with their own documentation
jwrosewell
committed
cf8d098
Documentation and house-style cleanup for the device and geo provider PR
jwrosewell
committed
de98934
Drop the unused HeaderMap import from the device tests
jwrosewell
committed
d3b4b06
Give each vendor crate a visible maintainers declaration
jwrosewell
committed
dcdb493

Commits on Sep 3, 2026

Log the jurisdiction class rather than the value when EC creation is refused
jwrosewell
committed
8bb5987

Commits on Sep 4, 2026

Merge branch 'main' into split/1-ec-provider
aram356
authored
ebf0117

Commits on Sep 14, 2026

Merge main into the Edge Cookie provider seam
jwrosewell
committed
af2e2f5
Build the Axum test state from the compiled auction plan
jwrosewell
committed
cb28ad3
Merge main into device and geo selection through split/1
jwrosewell
committed
0832f00
Resolve the host-signals passphrase from the secret store
jwrosewell
committed
a75571d
Describe rejected provider effects accurately
jwrosewell
committed
0980b73
Key the remaining identity-graph paths canonically
jwrosewell
committed
0e7f7eb
Correct comment claims and test a stale preload read
jwrosewell
committed
fb1bc28
Keep provider headers only from candidates that generation commits
jwrosewell
committed
cb6f717
Correct the admin lookup forms and the bare reader row note
jwrosewell
committed
1b88e42
Merge the Edge Cookie review follow-ups from split/1
jwrosewell
committed
37eadae

Commits on Sep 15, 2026

Name the host-signal Edge Cookie provider host_signals
jwrosewell
committed
6e61e0b
Give each identity provider its own table under [ec]
jwrosewell
committed
14a3ffb
Merge the per-provider [ec] tables from split/1
jwrosewell
committed
558bde5