spaxel/docs/notes
jedarden 3c5b79b791 docs(bf-5ig3e): confirm validator wired unconditionally + hello.Token-only check
Verify the validator-side half of the tokenless-sim REJECT root cause
against current source (first link of the bf-34lwt split):

- mothership/cmd/mothership/main.go:4494 — SetTokenValidator(...) is a
  bare statement with no env/build guard; provSrv is created
  unconditionally at :4492. 'validator configured?' is always YES.
- mothership/internal/ingestion/server.go:513 — tokenOK :=
  hello.Token != "" && validator(hello.MAC, hello.Token) depends
  solely on the deserialized hello JSON body field (message.go:22),
  not any HTTP header. No X-Spaxel-Token read exists on this path.

Conclusion: validator always configured; accept/reject hinges entirely
on hello.Token.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-07 06:38:33 -04:00
..
.gitkeep init: spaxel project — docs, plan, and marathon infrastructure 2026-03-26 06:43:25 -04:00
ci-test-sim-reference-map.md docs(notes): correct acceptance-test file count in spaxel-build inventory (bf-1yeh) 2026-07-04 09:36:38 -04:00
firmware-host-test-approach.md docs: decide firmware host test approach — gcc harness over ESP-IDF linux (bf-21t) 2026-07-03 06:01:55 -04:00
mdns-override.md feat(provisioning): carry ms_ip in payload for mDNS-less networks 2026-04-24 01:06:05 -04:00
recovery-mechanisms.md init: spaxel project — docs, plan, and marathon infrastructure 2026-03-26 06:43:25 -04:00
simulation-testing.md init: spaxel project — docs, plan, and marathon infrastructure 2026-03-26 06:43:25 -04:00
token-reject-root-cause.md docs(bf-34lwt): root-cause tokenless-sim REJECT in WS hello path 2026-07-07 06:19:29 -04:00
token-validator-wiring-confirm.md docs(bf-5ig3e): confirm validator wired unconditionally + hello.Token-only check 2026-07-07 06:38:33 -04:00
ux-visualization.md init: spaxel project — docs, plan, and marathon infrastructure 2026-03-26 06:43:25 -04:00