vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

derive a missing client digest from the secret that exists

Browse source 
A client with a secret in the store or in a leftover file but no digest gets the digest of that secret instead of stopping the unit. The password reaches authelia's prompt through a pty, not argv. A lost mint race takes the winner's secret. Also name the mint, not the publisher, in the remaining rust docs.
This commit is contained in:
atlas 2026-10-30 04:17:29 +01:00 • committed by mara
commit 05665c05f3
1 changed files with 127 additions and 57 deletions
Download patch file Download diff file Expand all files Collapse all files

5
swarm-nats-auth/src/oidc_secret.rs
View file

@ -25,8 +25,9 @@ use crate::introspect::{Answer, Caller};
use crate::keystore::KeyStore;
/// The path under the store's KV mount holding `client_id`'s secret.
/// `swarm-secret-publisher.nix` writes it, and `natsAuthReaders` in
/// `swarm-bao.nix` grants this responder's role the read.
/// Authelia's mint (`authelia-swarm-secrets`) writes it, at the path
/// `swarm-secret-publisher.nix` lists, and `natsAuthReaders` in `swarm-bao.nix`
/// grants this responder's role the read.
///
/// # Errors
/// When `client_id` is not a single path segment.