What's Changed
Security & Validation Fixes
- TLS peer verification enabled by default on all facilitator HTTP connections (#32)
- HTTPS enforcement on facilitator
base_url— prevents plaintext credential leakage (#35) - 8KB payload size cap on
PaymentRequiredandPaymentResponse(#34) - PAYMENT-SIGNATURE header size cap to prevent oversized header attacks (#32)
- SIWX ETS size cap to bound memory usage (#39)
- Payment signature format validation tightened (#39)
- Solana address validation strengthened with proper Base58 checks (#36)
- Idempotency cache warning when cache is missing (#36)
Improvements
- Optimized decimal parsing and centralized utility functions (#37)
- Bumped minimum Elixir to
~> 1.19(#33)
Testing
- Added unit test for
HTTP.secure_pool_opts/0(#38)
Full Changelog: v0.3.2...v0.3.3