CyberMind-FR
6b7aa62a0e
- ZKP Mesh Authentication: Zero-Knowledge Proof identity for mesh nodes - New API endpoints: zkp-challenge, zkp-verify, zkp/graph - Shell functions: ml_zkp_init, ml_zkp_challenge, ml_zkp_verify - Enhanced join flow with optional ZKP proof requirement - Blockchain acknowledgment via peer_zkp_verified blocks - LuCI dashboard with ZKP status section and peer badges - MirrorNet Ash Compatibility: Fixed BusyBox shell incompatibilities - Replaced process substitution with pipe-based patterns - Fixed mirror.sh, gossip.sh, health.sh, identity.sh - Mesh Blockchain Sync: Fixed chain synchronization between nodes - Fixed /api/chain/since endpoint to return only new blocks - chain_add_block/chain_merge_block use awk for safe JSON insertion - Handles varying JSON formatting (whitespace, newlines) - Tested bidirectional sync: Master <-> Clone at height 70 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
50 lines
1.3 KiB
Bash
50 lines
1.3 KiB
Bash
#!/bin/sh
|
|
# Master-Link API - ZKP Proof Verification
|
|
# POST /api/master-link/zkp-verify
|
|
# Body: {"fingerprint": "<peer_fp>", "challenge_id": "<id>", "proof": "<base64>"}
|
|
# Returns: {"result": "ACCEPT|REJECT", "verified_at": <timestamp>}
|
|
|
|
echo "Content-Type: application/json"
|
|
echo "Access-Control-Allow-Origin: *"
|
|
echo "Access-Control-Allow-Methods: POST, OPTIONS"
|
|
echo "Access-Control-Allow-Headers: Content-Type"
|
|
echo ""
|
|
|
|
# Handle CORS preflight
|
|
if [ "$REQUEST_METHOD" = "OPTIONS" ]; then
|
|
exit 0
|
|
fi
|
|
|
|
# Load library
|
|
. /usr/lib/secubox/master-link.sh >/dev/null 2>&1
|
|
|
|
# Check if ZKP is enabled
|
|
zkp_enabled=$(uci -q get master-link.main.zkp_enabled)
|
|
if [ "$zkp_enabled" != "1" ]; then
|
|
echo '{"error":"zkp_disabled"}'
|
|
exit 0
|
|
fi
|
|
|
|
# Only accept POST
|
|
if [ "$REQUEST_METHOD" != "POST" ]; then
|
|
echo '{"error":"method_not_allowed"}'
|
|
exit 0
|
|
fi
|
|
|
|
# Read request body
|
|
read -r input
|
|
|
|
# Parse fields
|
|
fingerprint=$(echo "$input" | jsonfilter -e '@.fingerprint' 2>/dev/null)
|
|
challenge_id=$(echo "$input" | jsonfilter -e '@.challenge_id' 2>/dev/null)
|
|
proof=$(echo "$input" | jsonfilter -e '@.proof' 2>/dev/null)
|
|
|
|
# Validate required fields
|
|
if [ -z "$fingerprint" ] || [ -z "$proof" ]; then
|
|
echo '{"error":"missing_required_fields","required":["fingerprint","proof"]}'
|
|
exit 0
|
|
fi
|
|
|
|
# Verify proof
|
|
ml_zkp_verify "$fingerprint" "$proof" "$challenge_id"
|