extant2000/flamenet-e2e
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

§8.10: TURN usernames are <expiry>:<opaque>, never the user id #69

Merged
paulhitt merged 1 commits from privacy/turn-username-opaque into main 2026-10-07 14:22:44 +00:00
Conversation 3 Commits 1 Files Changed 3
+29 -7
paulhitt commented 2026-10-07 13:36:24 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

The relay stops putting the account id in TURN usernames: it crossed the network in clear over UDP. coturn only reads the expiry before the colon and HMACs the whole string, so it never needed the id. Tested live against production coturn: the new form allocates, wrong and expired credentials get 401.

Changes the §8.10 spec text, test/relay.mjs and the SELF-HOSTING retention table.

Must merge before the relay MR on privacy/sweep-2026-10, which pins this commit in .e2e-ref.

🤖 Generated with Claude Code

The relay stops putting the account id in TURN usernames: it crossed the network in clear over UDP. coturn only reads the expiry before the colon and HMACs the whole string, so it never needed the id. Tested live against production coturn: the new form allocates, wrong and expired credentials get 401. Changes the §8.10 spec text, `test/relay.mjs` and the SELF-HOSTING retention table. Must merge before the relay MR on `privacy/sweep-2026-10`, which pins this commit in `.e2e-ref`. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
paulhitt commented 2026-10-07 13:36:39 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

mentioned in merge request flamenet-relay!181

mentioned in merge request flamenet-relay!181
paulhitt commented 2026-10-07 14:22:44 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

mentioned in commit 1eb2e4d797

mentioned in commit 1eb2e4d797eb3d0e9a25682f2c410d27bfc8df64
paulhitt (Migrated from gitlab.com) merged commit 1eb2e4d797 into main 2026-10-07 14:22:44 +00:00
paulhitt commented 2026-10-07 14:23:26 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

mentioned in commit flamenet-relay@f9f7eb4018ff62d848f290ce7e0c900571d3792c

mentioned in commit flamenet-relay@f9f7eb4018ff62d848f290ce7e0c900571d3792c
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
accuracy
A public page or doc claims something the code does not do
 blocked:apple
Waiting on App Store review
 docs
ops
Deploy, CI, infrastructure
 parity
One platform has it and the other does not
 privacy
Changes what is stored, or what we say is stored
 protocol
unwired
Built in the engine, not reachable from the UI
 verification
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
extant2000git
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: extant2000/flamenet-e2e#69