Arca v0.9.2

Security

• A public object is read on a site apart from the platform's. An
  owner's read of a public object redirects to ARCA_PUBLIC_CDN_URL,
  whose host answers the object under the type it was written with, so a
  page someone stored runs there. The production overlay's base was on the
  origin's registrable domain, where such a page is same-site with the
  console and sign-in: SameSite cookies do not keep it out, and it can
  set cookies for the whole domain. The base is now a host on a
  registrable domain of its own, in front of the same CDN, so a key reads
  the same object there and an address already handed out on the old
  host keeps working. A deploy test fails the overlay when the base and
  ARCA_PUBLIC_URL share a registrable domain, and the configuration
  reference says to keep the base apart from the installation's own site.

Release evidence

• Tag: v0.9.2
• Commit: 5d35e19a06311e5568b92cc717d148ac212d8ece
• Deploy: https://github.com/latere-ai/arca/actions/runs/39170758300
• Origin: https://api.latere.ai
• Served version: v0.9.2
• Smoke: /livez, /readyz, /openapi.json and /version each answered 200
• Surface: /v1/storage/files/me/ answered 401, so the origin routes the prefix to this build

Conformance

The suite of spec 017 against the published image, on the kind
stack of spec 016.

    contract_test.go:103: unverified: TestContract/006/UnlistedIssuer: an expired token and a token for another audience are refused
    contract_test.go:103: unverified: TestContract/006/AnotherSpace: a refused space answers as a missing one
    contract_test.go:103: unverified: TestContract/005/Stars: a star on an unreadable object is refused as missing
    contract_test.go:103: unverified: TestContract/008/Link: a public link serves an unauthenticated caller
    contract_test.go:103: unverified: TestContract/012/NotAnAdministrator: an administrative route is a missing object for an ordinary caller
    contract_test.go:105: 54 passed, 0 failed, 0 skipped, 106 objects created and deleted
--- PASS: TestContract (1.35s)
--- PASS: TestTheSuiteReachesNoHelperOfThisTree (0.04s)
ok  	latere.ai/x/arca/test/conformance	1.396s

Release evidence

• Tag: v0.9.2
• Commit: unknown
• Origin: http://localhost:30180
• Served version: v0.9.2
• Smoke: /livez, /readyz, /openapi.json and /version each answered 200
• Surface: /v1/storage/files/me/ answered 401, so the origin routes the prefix to this build

The previous release's suite

The suite of v0.9.1, with the driver it shipped with, against the binary of v0.9.2 (spec 024). It counted: 54 passed, 0 failed, 0 skipped, 106 objects created and deleted.

Listed and no longer applying to these two releases, so run:

• 028/FolderCopy: v0.8.0: a move with recursive moves a folder (spec 030)