halkyon-days/halkyon
Watch
1
0
Fork
You've already forked halkyon
 0
Code Issues Pull requests Projects Releases 37 Packages Wiki Activity Actions

fix(auth): an IPv6 visitor counts by their /64

Browse source 
One household's line or one server gets a whole /64 of IPv6 addresses,
and could turn through them past every per-network limit (the second
reading's M5). networkOf now counts an IPv6 visitor by their /64
(networkKeyOf), an IPv4 visitor by their address as before.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
This commit is contained in:
Tizian 「ティツィアーン」 2026-10-20 21:48:25 +02:00
commit 4007041c9e
Signed by: raisondetredev
GPG key ID: 07F6FCF405488B64
1 changed files with 50 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

19
packages/halkyon_base_server/test/unit/network_test.dart
View file

@ -122,6 +122,25 @@ void main() {
}
});
test("is an IPv6 visitor's /64, as one household or server holds a "
'whole /64 and could turn through its addresses past every limit; '
'an IPv4 visitor its address', () {
expect(
networkKeyOf('2001:db8:1:2:aaaa:bbbb:cccc:1'),
'2001:db8:1:2::/64',
);
expect(
networkKeyOf('2001:db8:1:2::ffff'),
networkKeyOf('2001:db8:1:2:9::1'),
);
expect(
networkKeyOf('2001:db8:1:3::1'),
isNot(networkKeyOf('2001:db8:1:2::1')),
);
expect(networkKeyOf('198.51.100.7'), '198.51.100.7');
expect(networkKeyOf(null), 'null');
});
test('is none without a connection (tests, future calls)', () {
expect(
visitorAddress(