Morten V. Christiansen 4b719a0846 Switch token binding from per-request URL+method to domain-level host+nonce ... Challenge is now SHA256(host|nonce) instead of SHA256(url|method|nonce). A single card interaction authorises access to any path and method on the gated domain, which is the intended granularity. Tests updated accordingly: path/method rejection cases replaced with domain-level and tampered-host cases. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-05-09 23:52:48 +02:00
..
enrollment_test.dart	Phase 9: add Component 1 (filter_proxy), tests, session gate, doc update	2026-05-02 20:10:54 +02:00
fido2_test.dart	Initial commit: chromecard workspace snapshot	2026-04-29 22:06:14 +02:00
filter_proxy_test.dart	Switch token binding from per-request URL+method to domain-level host+nonce	2026-05-09 23:52:48 +02:00
widget_test.dart	Initial commit: chromecard workspace snapshot	2026-04-29 22:06:14 +02:00