Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Commit

Permalink
Update sign_json to support inline key config (#11139)
Browse files Browse the repository at this point in the history
It's been possible to configure a key inline in the homeserver.yaml since
13bc1e0. Update `sign_json` to work with this.
  • Loading branch information
richvdh authored Oct 20, 2021
1 parent 62db603 commit 57501d9
Show file tree
Hide file tree
Showing 2 changed files with 26 additions and 7 deletions.
1 change: 1 addition & 0 deletions changelog.d/11139.misc
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
Update the `sign_json` script to support inline configuration of the signing key.
32 changes: 25 additions & 7 deletions scripts-dev/sign_json
Original file line number Diff line number Diff line change
Expand Up @@ -51,13 +51,19 @@ Example usage:
"request with.",
)

parser.add_argument(
"-K",
"--signing-key",
help="The private ed25519 key to sign the request with.",
)

parser.add_argument(
"-c",
"--config",
default="homeserver.yaml",
help=(
"Path to synapse config file, from which the server name and/or signing "
"key path will be read. Ignored if --server-name and --signing-key-path "
"key path will be read. Ignored if --server-name and --signing-key(-path) "
"are both given."
),
)
Expand Down Expand Up @@ -87,11 +93,14 @@ Example usage:

args = parser.parse_args()

if not args.server_name or not args.signing_key_path:
if not args.server_name or not (args.signing_key_path or args.signing_key):
read_args_from_config(args)

with open(args.signing_key_path) as f:
key = read_signing_keys(f)[0]
if args.signing_key:
keys = read_signing_keys([args.signing_key])
else:
with open(args.signing_key_path) as f:
keys = read_signing_keys(f)

json_to_sign = args.input_data
if json_to_sign is None:
Expand All @@ -107,7 +116,7 @@ Example usage:
print("Input json was not an object", file=sys.stderr)
sys.exit(1)

sign_json(obj, args.server_name, key)
sign_json(obj, args.server_name, keys[0])
for c in json_encoder.iterencode(obj):
args.output.write(c)
args.output.write("\n")
Expand All @@ -118,8 +127,17 @@ def read_args_from_config(args: argparse.Namespace) -> None:
config = yaml.safe_load(fh)
if not args.server_name:
args.server_name = config["server_name"]
if not args.signing_key_path:
args.signing_key_path = config["signing_key_path"]
if not args.signing_key_path and not args.signing_key:
if "signing_key" in config:
args.signing_key = config["signing_key"]
elif "signing_key_path" in config:
args.signing_key_path = config["signing_key_path"]
else:
print(
"A signing key must be given on the commandline or in the config file.",
file=sys.stderr,
)
sys.exit(1)


if __name__ == "__main__":
Expand Down

0 comments on commit 57501d9

Please sign in to comment.