reputage / didery

reputage

reputation

didery's Issues

Add signature validation to all public endpoints

Create setup.py file for pypi compatiblity

Build POST endpoint for relay servers

Should include the following data:

• Ip address

Build POST endpoint for encrypted blobs

Should include the following data

• DID
• BLOB
• Signature

Write up requirements and tasks for client library

Flesh out the API

Nail down what endpoints there will be and what their request and responses will look like.

implement RAET relay code

Write code to relay blobs and histories to other servers.

UI Frame

• Setup page headers
• Setup navigation
• Setup tabs/pages
• Create layout with containers to display data

Document API

Add API documentation to readme.md

Build GET endpoint for public key rotation

Should include the following data:

• DID
• History
• Current key
• Changed
• Signatures

Save data to LMDB for public key rotation endpoint

Stored Public Keys Frontend

• Build functionality for stored public keys tab/page
• Displays for DID, history, current key, signature(s), and changed date
• Contains search and filter functionalities

Save data to LMDB for encrypted blobs endpoint

Build library for retrieving otp encrypted blobs

should retrieve from all servers

Flesh out relay server communication tasks

• Research RAET and Server Sent Events(SSE)
• Decide whether to use RAET or SSE

Relay Servers Frontend

• Build functionality for relay servers tab/page
• Displays for IP address and status (success/failure)
• Contains search and filter functionalities

Build library for retrieving key rotations

should retrieve from all servers

Server Status Frontend

• Build functionality for server status tab/page
• Displays stats and visualizations about the server
• Possibly displays raw data
• Contains search and filter functionalities

Add more Documentation to API

• Document the new restrictions the api has now that the validation has been implemented
• Add more info on what requests and responses look like
• Include relevant HTTPie commands

Build remaining cli interfaces

• define consensus level
• store command
• retrieve command
• validate consensus command

Setup ioflo to start server

write custom behaviors to stand up the server.

Document server setup and requirements

Add Documentation to Readme.md and Wiki

Build GET endpoint for relay servers

Should include the following data:

• Ip address
• Status

Build RAET receiving code for relay messages

write code to receive the relay messages and update or create the appropriate resources.

Build CLI for validation server retrieval from config file

• automatically look in current dir if no config file is specified
• use bluepea's built in json file management code

Build GET endpoint for Error Log

Should include the following data:

• Title
• Msg
• Timestamp

Implement or scope out adding multi signature key rotations

• signers field will have to accept ints and lists of ints.
• Header will need to support m possible signatures and the tag should be changed from signer to the index of the signatures corresponding public key in the body's "signers" field.

Error Log Frontend

• Build functionality for error log tab/page
• Displays for error title, message, and timestamp

Investigate how /blob endpoint verifies who is updating a resource

Currently anyone can send an updated otp encrypted blob to the /blob endpoint if they know the corresponding DID. This could allow bad actors to corrupt data in the /blob endpoint.

Either the POST/PUT request needs to contain the rotation history, or the user must first upload their rotation history to /history endpoint so the current key can be looked up.

• Investigate which of the two options above will be best.
• The POST/PUT /blob endpoint needs to require a signature in the header.

@SmithSamuelM any input?

UI Setup

• Establish development environment
• Setup necessary assets
• Create HTML, CSS, and JS files for needed pages
• Add needed metadata to files

Build library for verifying consensus

as part of the setup of the library a list of servers must be passed in

Design and document command line interface

The interface needs to include the following options:

• define consensus level
• designate file with validation servers
• designate file with otp encrypted blob
• designate file with key rotation history
• input encrypted blob via cli
• input rotation history via cli
• store command
• retrieve command
• validate consensus command

Build simple Raet demo

Learn how to use raet by building a simple demo that sends basic text strings.

Prevent replay attacks on /blob /relay

add changed field to the api

Build cli for data retrieval from files

should be able to retrieve blobs and histories

Build POST endpoint for public key rotation

Should include the following data:

• DID
• History
• Current key
• Changed
• Signatures

Learn Click library for command line interface

Read the documentation for Click here http://click.pocoo.org/5/

Plan out tasks for next milestone

Build cli for data retrieval from cli

should be able to retrieve blobs and histories

Plan Next Milestone 5/2-5/7

Build library for storing rotations

should broadcast to all servers

Build library for storing otp encrypted blobs

should broadcast to all servers

Integrate client library with Transcrypt

Add Falcon Routes and Validation

Add routes for these endpoints:

• GET endpoint for public key rotation
• POST endpoint for public key rotation
• GET endpoint for encrypted blobs
• POST endpoint for encrypted blobs
• GET endpoint for relay servers
• POST endpoint for relay servers
• GET endpoint for server stats
• GET endpoint for Error Log

Encrypted Blob Frontend

• Build functionality for encrypted blob tab/page
• Displays for DID, signature(s), and possibly blob
• Contains search and filter functionalities

Build GET endpoint for encrypted blobs

Should include the following data:

• DID
• BLOB
• Signature

Refine UI

• Add any overarching UI functionality (i.e. general search bar)
• Make any needed changes
• Verify that everything is functioning

Design and document structure of RAET relay messages

Build a spec for how rotation and blob data will be differentiated and how it will be formatted.

Research http request libraries for python

Save relay server data to LMDB