Claude f7afc56752 feat(quartz): add optional NIP-42 AUTH relay policy ...

Introduce OptionalAuthPolicy, a relay-server policy that runs the full
NIP-42 challenge/verify handshake — emitting the AUTH challenge on connect
and recording verified pubkeys into the connection scope — but never
requires it: EVENT, REQ, and COUNT are always accepted, so clients that
ignore the challenge keep working.

It subclasses FullAuthPolicy and only relaxes the EVENT/REQ/COUNT gates, so
the authorize() hook and per-connection authenticatedUsers set behave
identically; downstream policies can still gate or rewrite on caller
identity. Wire it into geode via an optional_auth config option and a
--optional-auth CLI flag (ignored when require_auth/--auth is set, since
mandatory AUTH already sends the challenge).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BJWy4dBBYLbqthhLvbcZh7

2026-07-01 19:30:19 +00:00

..

plans

docs: audit, status-stamp, and index all module plans

2026-06-30 15:35:38 +00:00

src

feat(quartz): add optional NIP-42 AUTH relay policy

2026-07-01 19:30:19 +00:00

build.gradle.kts

build: drive all module versions from the catalog

2026-06-17 11:19:52 -04:00

config.example.toml

feat(quartz): add optional NIP-42 AUTH relay policy

2026-07-01 19:30:19 +00:00