dsql
bfeee80712
authorize never checked the target fingerprint against existing docs before save()'s upsert-by-_id, so authorizing the local machine's own public key under a new friendly name silently replaced the local authorizer record (can_authorize demoted to False) while printing a success banner. With a sole authorizer this bricks the CLI: authorize refuses (not permitted), init refuses (already initialized), and revoke of the local key refuses (refusing to revoke the local key) -- no in-CLI recovery. Mirror revoke's local-key guard and extend it to any existing _id, so a duplicate target is refused with a clear message instead of silently replacing the record. Signed-off-by: disqualifier <dev@disqualifier.me>
28 lines
711 B
TOML
28 lines
711 B
TOML
[build-system]
|
|
requires = ["hatchling"]
|
|
build-backend = "hatchling.build"
|
|
|
|
[project]
|
|
name = "envelope_authorizer"
|
|
version = "0.1.3"
|
|
description = "CLI key-authorization manager for envelope_crypto"
|
|
requires-python = ">=3.10"
|
|
dependencies = [
|
|
"envelope_crypto @ git+ssh://git@git.rethinkstudios.io/rethink-public/envelope_crypto.git@v0.1.0",
|
|
"tomli>=2.0; python_version<'3.11'",
|
|
]
|
|
|
|
[project.optional-dependencies]
|
|
mongo = [
|
|
"mongo @ git+ssh://git@git.rethinkstudios.io/rethink-public/mongo.git@v0.1.0",
|
|
]
|
|
|
|
[project.scripts]
|
|
authorizer = "envelope_authorizer.__main__:main"
|
|
|
|
[tool.hatch.metadata]
|
|
allow-direct-references = true
|
|
|
|
[tool.hatch.build.targets.wheel]
|
|
packages = ["src/envelope_authorizer"]
|