Repository navigation
Add a key file check and a command line to read a session without the app - #15
Merged
Merged
Conversation
… app verifySessionFile proves a saved key file opens the definition and responses, and with the in-memory file, that it is the same session and current. The malverdesoftware-session command verifies a key file and collects decrypted JSON with only the file and Node. docs/DATA-VISIBILITY.md lists what the relay and Cloudflare can see. session-client 0.2.0.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
session-client 0.2.0.
verifySessionFile(markdown, expected?)proves a saved key file opens the activity definition and responses (its private key opens something sealed to its public key). With the in-memory file, it also refuses a copy from another session or an older participant list. Passcodes can't be checked locally; only the relay holds what they derive.malverdesoftware-session verify <key-file>andcollect <key-file> [--drafts] [--out file.json]read a session with only the key file and Node 24.--outwon't overwrite an existing file and writes it with mode 600.docs/DATA-VISIBILITY.mdlists what leaves a device, what the relay stores, and what Cloudflare can see. It's linked from the README and spec.Checks: all tests pass (87, 22 and 40), plus typecheck, build and the release dry run. Smoke-tested the built bin through a symlink. Nothing is published to npm yet.
mPile will call
verifySessionFilein its publish steps after 0.2.0 is published.