Skip to content

TigerPASS: WebTigers production authority + pinned key as core.ini defaults #96

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
WebTigers merged 1 commit into from
Aug 2, 2026
Merged

TigerPASS: WebTigers production authority + pinned key as core.ini defaults #96

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,12 @@ All notable changes to **Tiger Core** (`webtigers/tiger-core`). Format follows

## [Unreleased]

### Added
- **Production TigerPASS defaults in `core.ini`.** A fresh install verifies TigerPASS against the WebTigers
authority out of the box — `tiger.pass.authority` + a **pinned** `tiger.pass.public_key` (Ed25519), so an
unsigned or wrong-key verdict is refused. A dev / self-hosted authority overrides both in the config DB
tier (global scope), no deploy.

### Security
- **TigerPASS activation now requires a positive, signed `valid` verdict from the authority.** Previously
`activatePass` only refused a definitive `lapsed` and accepted `unknown` (the ongoing nag-never-disable
Expand Down
9 changes: 9 additions & 0 deletions configs/core.ini
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -245,6 +245,15 @@ media.scan.image = 0 ; AWS Rekognition image
media.scan.video = 0 ; async video moderation + webhook callback
media.scan.image_threshold = 80 ; reject at/above this Rekognition confidence (0-100)

; ── TigerPASS — the WebTigers subscription that unlocks the premium module line ─────────────────
; The AUTHORITY a licensed "tigerpass" module verifies against, plus the Ed25519 PUBLIC key its
; signed verdicts are pinned to (an unsigned or wrong-key reply is refused, so a random key can
; never activate — see Tiger_License_Checker + System_Service_Modules::activatePass). These are the
; WebTigers PRODUCTION defaults; a dev / self-hosted authority overrides them in the config DB tier
; (tiger.pass.authority / tiger.pass.public_key, global scope) with no deploy — never edited here.
tiger.pass.authority = "https://webtigers.com/shop/authority"
tiger.pass.public_key = "MTgEX+sZSDIIDe3vkAmwa3B8PbB1Jv2d6XzsvHM2VCI="

; staging mirrors production (prod-like); override only what differs per deploy.
[staging : production]

Expand Down
Loading