From c2e566599aed088973b5a5be2bb04ee69cee5c7a Mon Sep 17 00:00:00 2001 From: tv Date: Mon, 9 Nov 2026 02:49:25 +0000 Subject: access: keep an SSH key's comment A key's line was stored as the key alone (`ssh-ed25519 `), whatever comment it came with, both from `PUT /auth/keys/` and from `--bootstrap-keys`. Now its comment is kept after it (`PublicKey::kept_line`), the spaces between its words made one. The comment checks nothing: every use of a key parses the line, and the parse reads the key alone. --- docs/access.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'docs/access.md') diff --git a/docs/access.md b/docs/access.md index 4bb5945..7392bb9 100644 --- a/docs/access.md +++ b/docs/access.md @@ -30,8 +30,8 @@ password hashes: every member reads the document). An entry that doesn't read as above gives less, never more: a capability that doesn't read is left out, and anything but `false` disables. * **`keys`**: the user's SSH keys, each by a name of its choosing, as an - `authorized_keys` line has it (`"laptop": "ssh-ed25519 AAAA…"`; Ed25519 only): what - it signs values with (Values signed by their users, below) and logs in with. A user + `authorized_keys` line has it (`"laptop": "ssh-ed25519 AAAA… alice@laptop"`; Ed25519 + only; the comment is kept and checks nothing): what it signs values with (Values signed by their users, below) and logs in with. A user manages its own, whatever else it may do: `GET /auth/keys`, `PUT /auth/keys/` with the line, `DELETE /auth/keys/`; under a strict policy, by signing its entry with only its keys changed (`continuum-signed key-add laptop -- cgit v1.3.1