ReleaseCloudflare (Workers AI)Cloudflare (Workers AI)published Oct 12, 2026seen 3h

cloudflare/moq-rs moq-relay-ietf-v0.7.29

cloudflare/moq-rs

Open original ↗

Captured source

source ↗
published Oct 12, 2026seen 3hcaptured 3hhttp 200method plain

moq-relay-ietf-v0.7.29

Repository: cloudflare/moq-rs

Tag: moq-relay-ietf-v0.7.29

Published: 2026-10-12T22:18:25Z

Prerelease: no

Release notes:

Fixed

  • *(auth)* note joining FETCH also needs Fetch(7) in module docs
  • *(auth)* clarify Fetch(7) applies to both standalone and joining FETCH
  • *(auth)* reword oracle test and doc caveat per reviewer
  • *(auth)* remove stale fallback comments and duplicate test
  • *(auth)* FETCH requires Fetch(7); remove Subscribe(4) fallback
  • *(auth)* correct fetch_denied_yields_no_existence_oracle doc comment
  • *(auth)* replace guarded match arm with explicit ActionAbsent + catch-all
  • *(auth)* correct FETCH spec citation §9.7 → §9.16
  • *(auth)* address AI review nits — docs, HookFault test, dedup, metrics note
  • *(auth)* add real CAT token tests for token_has_action and map_operation Fetch
  • *(auth)* correct fallback scope — ActionAbsent only, not ScopeMismatch
  • *(auth)* authorize FETCH with Fetch(7) grant; Subscribe(4) v0.1 fallback

Other

  • *(auth)* add ActionAbsent to DenyReason test coverage

Changed

  • *(auth)* FETCH now requires the Fetch(7) CAT moqt action (draft-16 §9.16).

Tokens that do not grant Fetch(7) for the requested namespace and track are denied. Subscribe(4) alone is not sufficient.