Add anonymous OOBE gateway grants

Provide App Attest-bound, one-time onboarding AI access without creating accounts, with durable replay protection and production deployment safeguards.
2026-08-21 22:55:46 +08:00
parent edd0d9feca
commit 0d236f57fb
32 changed files with 2202 additions and 61 deletions
@@ -78,4 +78,5 @@ app:
    enforceDeviceCheck: "$ENFORCE_DEVICE_CHECK:false"
    enforceAppAttest: "$ENFORCE_APP_ATTEST:false"
    appleEnvironment: "$APPLE_INTEGRITY_ENVIRONMENT:development"
+    allowDevelopmentAppAttest: "$ALLOW_DEVELOPMENT_APP_ATTEST:false"
    challengeLifetimeSeconds: "$APP_ATTEST_CHALLENGE_TTL_SECONDS:300"