Personal mirror of DanConwayDev/ngit-cli on git.upleb.uk https://upleb.uk/npub1tkq8unhsd5jqx6ueex5lcpsgknrpquxuk44ftpjlpm3ulaake7xs76txrw/ngit-cli-mirror/atom?h=v0.1.0 2024-01-23T00:00:00+00:00 2024-01-23T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2024-01-23T00:00:00+00:00 urn:sha1:e8ac3b6b49c6ec38cf4694dc4cb08f12c684ed7b to prevent tests from poluting public relays 2024-01-22T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2024-01-22T00:00:00+00:00 urn:sha1:d44fd5b33e608c3c1e3ca50bc47ec96bda73e1a0 so that it is outside the 30000 <= n < 40000 parameterized replacable range 2024-01-22T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2024-01-22T00:00:00+00:00 urn:sha1:48bb73000b939a2968e48e7832650df65d7add19 this doesnt effect the current tests but is more realistic 2023-12-01T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-12-01T00:00:00+00:00 urn:sha1:06be0bc44011411b78217459f505ed12281b32c4 - fetch prs and present as a selectable list - create and / or checkout branch for selected pr - apply latest patches as commits 2023-11-01T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-11-01T00:00:00+00:00 urn:sha1:57321aa9136293b24757a6695a5c92087af539ab fetch repository reference events to identify repository relays send pr events to repository relays alongside user relays 2023-11-01T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-11-01T00:00:00+00:00 urn:sha1:497bf71910f0f224ce66b154d58a228095a40c0a immediately request metadata and relay list from any newly discovered user write relays 2023-09-30T23:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-09-30T23:00:00+00:00 urn:sha1:e237328ec611a5891586530c1d3cb26c16c1093b get user relay list and metadata events from relays when keys are used and last fetch attempt was more than an hour ago uses user's write relays if known, otherwise uses fallback relays to achieve this a method for intergration testing event fetching from relays was added 2023-09-30T23:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-09-30T23:00:00+00:00 urn:sha1:000901c0cbca8464b5a89bcc93c5474f6564bafd add tests but these currently don't work when run together 2023-09-30T23:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-09-30T23:00:00+00:00 urn:sha1:6e9245542f070c39a1975f0d53d88913c4ac667d - identify commits - create pull request event - create patch events 2023-09-01T00:00:00+00:00 DanConwayDev DanConwayDev@protonmail.com 2023-09-01T00:00:00+00:00 urn:sha1:96660a90e4cd296a2922d7a547de4cd9d0b1928b Enables the user to only handle the nsec upon first use of the tool by encrypting it with a password and storing it on disk in an application cache. The approach to encryption draws heavily from that used by the gossip nostr client. - unencrypted nsec is zeroed from memory - a salt is used to defend against rainbow tables - computationally expensive key stretching defends against brute-force attacks of passwords with low entropy. There is UX trade-off between decryption speed and key-stretching computation. This UX challenge is exacerbated in a cli tool as decryption must take place more regularly. Thought was put into the selected n_log and a heavily reduced value is provided for long passwords where security benefits are smaller. A more granular reducing in computation was also considered by rejected to avoided to revealing just how weak a password is as most weak passwords are reused.