Support blind key rotation #399

已合併

Plume_migration_agent 將 3 次提交從 blind-key-rotation 合併至 master

trinity-1686a 已留言

擁有者

try to fetch user when receiving an invalid signature
regenerate new key-pair when sending Delete activity

Fix #398 - [x] try to fetch user when receiving an invalid signature - [x] regenerate new key-pair when sending `Delete` activity

codecov[bot] 已留言 (已從 github.com 遷移)

Codecov Report

Merging #399 into master will increase coverage by 0.21%.
The diff coverage is 0%.

@@            Coverage Diff             @@
##           master     #399      +/-   ##
==========================================
+ Coverage   27.87%   28.08%   +0.21%     
==========================================
  Files          63       63              
  Lines        7254     7405     +151     
==========================================
+ Hits         2022     2080      +58     
- Misses       5232     5325      +93

# [Codecov](https://codecov.io/gh/Plume-org/Plume/pull/399?src=pr&el=h1) Report > Merging [#399](https://codecov.io/gh/Plume-org/Plume/pull/399?src=pr&el=desc) into [master](https://codecov.io/gh/Plume-org/Plume/commit/3128e6a3b9963bda81f482e972eb853c0d564d35?src=pr&el=desc) will **increase** coverage by `0.21%`. > The diff coverage is `0%`. ```diff @@ Coverage Diff @@ ## master #399 +/- ## ========================================== + Coverage 27.87% 28.08% +0.21% ========================================== Files 63 63 Lines 7254 7405 +151 ========================================== + Hits 2022 2080 +58 - Misses 5232 5325 +93 ```

igalic (已從 github.com 遷移) 已審核

igalic (已從 github.com 遷移) 留下了回應

👀

src/routes/user.rs

igalic (已從 github.com 遷移) 已留言

should we be printing stuff here?

trinity-1686a 已審核

src/routes/user.rs

trinity-1686a 已留言

發布者

擁有者

I kept it because it was here before. If we had a proper logger this should get logged as this could be a an attack trial, but as it is, lost in stdout, I guess it's more of a debugging print?

igalic (已從 github.com 遷移) 已審核

src/routes/user.rs

igalic (已從 github.com 遷移) 已留言

i was wondering where our (debugging) log was

elegaanz (已從 github.com 遷移) 已審核

elegaanz (已從 github.com 遷移) 留下了回應

The code looks right, but I think I found a bug (maybe it's only me). To reproduce:

Create a@plume.one and b@plume.two
Make them follow each other
a@plume.one posts two articles, they are received on plume.two as they should
a@plume.one deletes one of these articles, and it is deleted on plume.two too
a@plume.one waits more than 10 minutes, and delete the second article
the Delete activity gets rejected by plume.two

Edit: also note that the next activities from a@plume.one are correctly received by plume.two

The code looks right, but I think I found a bug (maybe it's only me). To reproduce: - Create a@plume.one and b@plume.two - Make them follow each other - a@plume.one posts two articles, they are received on plume.two as they should - a@plume.one deletes one of these articles, and it is deleted on plume.two too - a@plume.one waits more than 10 minutes, and delete the second article - the `Delete` activity gets rejected by plume.two Edit: also note that the next activities from a@plume.one are correctly received by plume.two

elegaanz (已從 github.com 遷移) 核可了這些變更

elegaanz (已從 github.com 遷移) 留下了回應

It is working now. 👍 (but I don't understand what was wrong with the previous condition, and this one doesn't make sense for me)

It is working now. :+1: (but I don't understand what was wrong with the previous condition, and this one doesn't make sense for me)

trinity-1686a 已留言

發布者

擁有者

previously, the first if would match in case of invalid request, and the second would do exactly the same, match on invalid request. But the first block is the Ok(()) one, so on invalid request it would say "ok this is fine".
Now the condition for the second if is inverted, so when the request is valid it returns Ok(()), when the request is invalid it returns the signature error

previously, the first `if` would match in case of invalid request, and the second would do exactly the same, match on invalid request. But the first block is the Ok(()) one, so on _invalid_ request it would say "ok this is fine". Now the condition for the second `if` is inverted, so when the request is _valid_ it returns Ok(()), when the request is invalid it returns the signature error

👍 2

審核者

此合併請求已被合併為 c4a4ea5b6c。

您也可以查看命令列指南。

第一步：

在您的儲存庫中切換到新分支並測試變更。

git checkout -b blind-key-rotation master

git pull origin blind-key-rotation

第二步：

合併變更並更新到 Forgejo。

git checkout master

git merge --no-ff blind-key-rotation

git push origin master

登入才能加入這對話。

沒有審核者

未選擇里程碑

沒有負責人

2 參與者

通知

截止日期

截止日期無效或超出範圍，請使用「yyyy-mm-dd」的格式。

未設定截止日期。

先決條件

未設定先決條件。

載入中…

尚未有任何內容

標籤 里程碑

Support blind key rotation #399

Codecov Report

審核者

第一步：

第二步：

標籤里程碑