Controlled upstream application for the STEVE browser/WASM and Rust SDK release gates. The UI and tests live in the STEVE repository; this app only runs behind STEVE inside the enclave.
- JavaScript 68%
- HCL 21.3%
- Dockerfile 10.7%
| deploy | ||
| .dockerignore | ||
| Containerfile | ||
| LICENSE | ||
| README.md | ||
| server.mjs | ||
STEVE Nitro test fixture
Controlled upstream application for the STEVE browser/WASM and Rust SDK release gates. The UI and tests live in the STEVE repository; this app only runs behind STEVE inside the enclave.
Contract
| Endpoint | Expected behavior |
|---|---|
GET /.well-known/steve-test-fixture |
steve-test-fixture/v1 capabilities |
POST /echo |
Echo up to 1 MiB with the request content type |
GET /unauthorized |
Controlled HTTP 401 |
GET /delay?ms=N |
Delay up to 10 seconds |
GET /compressed |
Identity or gzip response based on Accept-Encoding |
GET /health |
200 OK |
Deployment branches
main contains the shared app and the two configuration templates:
deploy/xwing/caution.hcldeploy/x25519/caution.hcl
Create deploy/xwing and deploy/x25519 from a committed main, then copy the
matching template to root caution.hcl on each branch. The X-Wing branch also
commits the existing .caution/deployment.json. For X25519, replace
x25519.example.invalid, run caution init, and commit the generated deployment
file.
Before deployment:
curl -fsS https://<platform>/.well-known/caution/build-inputs | jq .steve
git push caution HEAD:main
caution verify --attestation-url https://<domain>/attestation
Do not add a Caution debug block. Both deployment configs allow the STEVE test
UI origins http://localhost:3000 and http://127.0.0.1:3000.