Replace VNC JWT auth with a Noise_IK handshake bound to ACL-pushed pubkeys

2026-10-07 05:59:06 +02:00 · 2026-05-21 17:36:15 +02:00
parent 2f4ddf0796
commit 3d3055dc7f
36 changed files with 2014 additions and 1118 deletions
@@ -403,7 +403,9 @@ message VNCSessionInfo {
  string remoteAddress = 1;
  string mode = 2;
  string username = 3;
-  string jwtUsername = 4;
+  // userID is the Noise-verified session identity (hashed user ID from
+  // the ACL session-key entry), empty when auth is disabled.
+  string userID = 4;
 }

 // VNCServerState contains the latest state of the VNC server