diff options
| author | tv <tv@krebsco.de> | 2026-11-07 22:35:21 +0100 |
|---|---|---|
| committer | tv <tv@krebsco.de> | 2026-11-07 22:35:21 +0100 |
| commit | d4d52efa2787802ff67b4a6c58d7f00910997d77 (patch) | |
| tree | 7e9d8f6f67520af5731d7371153cbd75f86f60d2 /docs/access.md | |
| parent | b6f815882a6d4a32c1198bd3666edaeaf1f7bca3 (diff) | |
scripts: a reference client for signed values
scripts/continuum-signed (ssh-keygen, curl, jq): login by key, put and
delete signed values, get envelopes, verify one against its user's
keys.
Auth plan M7.
Diffstat (limited to 'docs/access.md')
| -rw-r--r-- | docs/access.md | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/docs/access.md b/docs/access.md index d81f115..57462db 100644 --- a/docs/access.md +++ b/docs/access.md @@ -273,6 +273,10 @@ a list of paths as capabilities name them, `*` for any one key: (`cv1.<payload>.<signature>`): the payload names the path, the value (`null`: deleted), the user, when, and the envelope it replaces (`prev`), and the signature is the user's over it, as `ssh-keygen -Y sign -n continuum-value` makes it, with one of its `keys`. +`scripts/continuum-signed` is a reference client, with `ssh-keygen`, `curl` and `jq`: +it logs in by key, writes and deletes signed values (`put config '{"mode": "fast"}'`), +and checks one against its user's keys (`verify config`). + A node takes one only from that user, for that path, replacing what is there, by one of the user's keys, and if the user may write there ([`api.md`](api.md), Signed values); it writes nothing else there, nor within or above such a value (`409`), and the users |
