HomePhabricator
Diffusion Comm 0e56a7857d8c

[web] Pass `signedIdentityKeysBlob` to `keyserver` on `siwe_auth`

Tags
None
Referenced Files
F402902: d5802c.png
Feb 26 2023, 6:03 PM
File Not Attached
Subscribers
None

Description

[web] Pass signedIdentityKeysBlob to keyserver on siwe_auth

Summary:
Include signedIdentityKeysBlob in siwe_auth request and update siweAuthRequestInputValidator to accept signedIdentityKeysBlob. Right now we don't do anything with the signedIdentityKeysBlob, but it's being passed to keyserver from web when hitting both login and siwe_auth endpoints.

Next up is

  1. Making sure that signedIdentityKeysBlob is valid (regex checks)
  2. Pulling out primary.ed25519 and verifying the payload signature (maybe an argument for leaving primaryIdentityPublicKey as part of the login request and maybe adding it to siwe_auth?)
  3. Stringifying the entire signedIdentityKeysBlob and storing it in the serverDB (going to do a migration to remove existing stuff first).

Depends on D6895

Test Plan:
Set breakpoint in siweAuthResponder and observed that signedIdentityKeysBlob "made it through" and validator successfully validated request:

d5802c.png (1×2 px, 814 KB)

Reviewers: ashoat, tomek

Reviewed By: ashoat

Differential Revision: https://phab.comm.dev/D6896

Details

Provenance
atulAuthored on Feb 26 2023, 5:55 PM
Reviewer
ashoat
Differential Revision
D6896: [web] Pass `signedIdentityKeysBlob` to `keyserver` on `siwe_auth`
Parents
rCOMM27c3ce790fd9: [keyserver] Add `signedIdentityKeysBlobValidator` to…
Branches
Unknown
Tags
Unknown