Skip to content

1.1.1

Choose a tag to compare

View all tags
@Herklos Herklos released this 24 Mar 13:39
· 199 commits to master since this release
v1.1.1
3c3c23d

Fixed

  • SyncManager.push() signed plaintext instead of encrypted payload — affects both starfish-sdk (Python) and @starfish/client (TypeScript). When both encryption and signing were active, the signature was computed over stableStringify(pendingData) (plaintext) while the server verified against stableStringify(payload) (encrypted wrapper), causing every push to be rejected with HTTP 400 "Invalid author signature". Fixed in starfish_sdk/sync.py:99 and src/sync.ts:91. The server required no changes.
Assets 2
Loading