aboutsummaryrefslogtreecommitdiffstats
path: root/docs
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2026-11-07 22:35:21 +0100
committertv <tv@krebsco.de>2026-11-07 22:35:21 +0100
commitd4d52efa2787802ff67b4a6c58d7f00910997d77 (patch)
tree7e9d8f6f67520af5731d7371153cbd75f86f60d2 /docs
parentb6f815882a6d4a32c1198bd3666edaeaf1f7bca3 (diff)
scripts: a reference client for signed values
scripts/continuum-signed (ssh-keygen, curl, jq): login by key, put and delete signed values, get envelopes, verify one against its user's keys. Auth plan M7.
Diffstat (limited to 'docs')
-rw-r--r--docs/access.md4
1 files changed, 4 insertions, 0 deletions
diff --git a/docs/access.md b/docs/access.md
index d81f115..57462db 100644
--- a/docs/access.md
+++ b/docs/access.md
@@ -273,6 +273,10 @@ a list of paths as capabilities name them, `*` for any one key:
(`cv1.<payload>.<signature>`): the payload names the path, the value (`null`: deleted),
the user, when, and the envelope it replaces (`prev`), and the signature is the user's
over it, as `ssh-keygen -Y sign -n continuum-value` makes it, with one of its `keys`.
+`scripts/continuum-signed` is a reference client, with `ssh-keygen`, `curl` and `jq`:
+it logs in by key, writes and deletes signed values (`put config '{"mode": "fast"}'`),
+and checks one against its user's keys (`verify config`).
+
A node takes one only from that user, for that path, replacing what is there, by one
of the user's keys, and if the user may write there ([`api.md`](api.md), Signed values);
it writes nothing else there, nor within or above such a value (`409`), and the users