Personal mirror of DanConwayDev/ngit-cli on git.upleb.uk https://upleb.uk/npub1tkq8unhsd5jqx6ueex5lcpsgknrpquxuk44ftpjlpm3ulaake7xs76txrw/ngit-cli-mirror/atom?h=v0.1.2 2024-01-26T21:32:21+00:00 2024-01-26T21:32:21+00:00 DanConwayDev DanConwayDev@protonmail.com 2024-01-26T21:32:21+00:00 urn:sha1:fc3f22eac2bb81823f170f61ba9d39baff76b933 this is a contribution from jk (sectore) that I rebased and squashed into this commit. the tests were broken in the last few commits to rush out some fixes. this change may introduce more issues because of Relay.respond_standard_req. 2024-01-23T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2024-01-23T00:00:00+00:00 urn:sha1:bb0b1c6b10f4912150cb3e33e6af8a6fdd9bde44 the branch that was referenced was merged 3 months ago but there hasn't been a new release so targeting the merge commit 2023-12-06T08:03:11+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-12-06T08:03:11+00:00 urn:sha1:7392a20a3e38b4030b27761a3cffee64484695e7 replace local reference with fork on github 2023-11-01T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-11-01T00:00:00+00:00 urn:sha1:9a00d130b05d1e8e762c1e5df12c709c5c38890c fix breaking changes 2023-11-01T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-11-01T00:00:00+00:00 urn:sha1:d7ec799d3565adc0503dd2f5c42c3953cbdd1fb9 use a patched websocket server that releases port after x connections enabling its use in many tests included in the same test run 2023-09-30T23:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-09-30T23:00:00+00:00 urn:sha1:e237328ec611a5891586530c1d3cb26c16c1093b get user relay list and metadata events from relays when keys are used and last fetch attempt was more than an hour ago uses user's write relays if known, otherwise uses fallback relays to achieve this a method for intergration testing event fetching from relays was added 2023-09-30T23:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-09-30T23:00:00+00:00 urn:sha1:000901c0cbca8464b5a89bcc93c5474f6564bafd add tests but these currently don't work when run together 2023-09-30T23:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-09-30T23:00:00+00:00 urn:sha1:b9a88672b8734448615354e3f46748d2fdc2f647 - add client - use client to send event - add async functionality - enabler for relay interaction whilst getting cli input 2023-09-30T23:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-09-30T23:00:00+00:00 urn:sha1:6e9245542f070c39a1975f0d53d88913c4ac667d - identify commits - create pull request event - create patch events 2023-09-01T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-09-01T00:00:00+00:00 urn:sha1:96660a90e4cd296a2922d7a547de4cd9d0b1928b Enables the user to only handle the nsec upon first use of the tool by encrypting it with a password and storing it on disk in an application cache. The approach to encryption draws heavily from that used by the gossip nostr client. - unencrypted nsec is zeroed from memory - a salt is used to defend against rainbow tables - computationally expensive key stretching defends against brute-force attacks of passwords with low entropy. There is UX trade-off between decryption speed and key-stretching computation. This UX challenge is exacerbated in a cli tool as decryption must take place more regularly. Thought was put into the selected n_log and a heavily reduced value is provided for long passwords where security benefits are smaller. A more granular reducing in computation was also considered by rejected to avoided to revealing just how weak a password is as most weak passwords are reused.