Personal mirror of DanConwayDev/ngit-cli on git.upleb.uk https://upleb.uk/npub1tkq8unhsd5jqx6ueex5lcpsgknrpquxuk44ftpjlpm3ulaake7xs76txrw/ngit-cli-mirror/atom?h=v1.6.3 2024-09-04T12:30:59+00:00 2024-09-04T12:30:59+00:00 DanConwayDev DanConwayDev@protonmail.com 2024-09-04T07:04:48+00:00 urn:sha1:949c6459aa7683453a7160423b689ceadb08954b the make the code more readable this commit just moves the files, the next commit should fix the imports 2024-06-24T08:39:18+00:00 DanConwayDev DanConwayDev@protonmail.com 2024-06-24T08:39:18+00:00 urn:sha1:173ab188b326fbe78cfba4ab455a74619f4556bb replace ngit yaml file config with: * nsec / ncryptsec / npub in git config in nostr.* namespace * sql database cache for metadata and relay events allow different logins to be used for different git repositories by storing login in local git config 2023-09-01T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-09-01T00:00:00+00:00 urn:sha1:96660a90e4cd296a2922d7a547de4cd9d0b1928b Enables the user to only handle the nsec upon first use of the tool by encrypting it with a password and storing it on disk in an application cache. The approach to encryption draws heavily from that used by the gossip nostr client. - unencrypted nsec is zeroed from memory - a salt is used to defend against rainbow tables - computationally expensive key stretching defends against brute-force attacks of passwords with low entropy. There is UX trade-off between decryption speed and key-stretching computation. This UX challenge is exacerbated in a cli tool as decryption must take place more regularly. Thought was put into the selected n_log and a heavily reduced value is provided for long passwords where security benefits are smaller. A more granular reducing in computation was also considered by rejected to avoided to revealing just how weak a password is as most weak passwords are reused. 2023-09-13T09:24:49+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-09-01T00:00:00+00:00 urn:sha1:6423baebd92e45c9be85157c443dff42e65d8d14 Create skeleton for a complete rebuild of the prototype as a production ready product. Includes design patterns for: - dependency injection - unit testing with dependency mocking - integration testing - error handling - config storage BREAKING-CHANGE: ground-up redesign with incompatible protocol standards