- register_device() generates signing + deploy keypairs via core device module, stores them in DEVICE_STATE (once_cell Lazy<Mutex>), and returns only public keys to JS - sign_for_git() signs data using the internal signing key - get_device_info() returns name and public keys; returns null if not registered - clear_device() zeroes and drops device state (logout / re-registration) - Removed generate_device_keypair() which exposed raw private key bytes Fixes audit I5: private key material no longer crosses the WASM boundary. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
27 lines
651 B
TOML
27 lines
651 B
TOML
[package]
|
|
name = "relicario-wasm"
|
|
version = "0.2.0"
|
|
edition = "2021"
|
|
description = "WASM bindings for relicario password manager"
|
|
|
|
[lib]
|
|
crate-type = ["cdylib", "rlib"]
|
|
|
|
[dependencies]
|
|
relicario-core = { path = "../relicario-core" }
|
|
wasm-bindgen = "0.2"
|
|
serde-wasm-bindgen = "0.6"
|
|
serde_json = "1"
|
|
serde = { version = "1", features = ["derive"] }
|
|
zeroize = "1"
|
|
getrandom = { version = "0.2", features = ["js"] }
|
|
ed25519-dalek = { version = "2", features = ["rand_core"] }
|
|
base64 = "0.22"
|
|
hex = "0.4"
|
|
rand = "0.8"
|
|
once_cell = "1"
|
|
|
|
[dev-dependencies]
|
|
wasm-bindgen-test = "0.3"
|
|
image = { version = "0.25", default-features = false, features = ["jpeg"] }
|