Skip to content

Conversation

@kim
Copy link
Contributor

@kim kim commented Apr 18, 2024

When a server key rotation is suspected, suggest to make the new identity the default.

This usually happens during development using an ephemeral instance. If one follows the instructions, the default_identity is not set for the existing server, which makes the CLI generate a fresh identity every time.

See also: #333

Expected complexity level and risk

1

Testing

Describe any testing you've done, and any testing you'd like your reviewers to do,
so that you're confident that all the changes work as expected!

  • Spin up an ephemeral stdb
  • Try to do something using the CLI
  • Observe that it complains about a rotated key
  • Run spacetime identity new --no-email --server <the server> (without --default)
  • Try more things using the CLI
  • Observe that a fresh identity is created every time
  • Run spacetime identity new --no-email --server <the server> --default (as suggested)
  • Observe that this identity is used subsequently

When a server key rotation is suspected, suggest to make the new
identity the default.

This usually happens during development using an ephemeral instance. If
one follows the instructions, the `default_identity` is not set for the
existing server, which makes the CLI generate a fresh identity every
time.

See also: #333
@kim kim requested review from gefjon and jdetter April 18, 2024 08:34
\tspacetime identity remove {identity}
Generate a new identity with:
\tspacetime identity new --no-email --server {server}"
\tspacetime identity new --no-email --server {server} --default"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should fix the UX issue in general, but regardless this is a good change to the warning to the user.

Copy link
Collaborator

@jdetter jdetter left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants