fluencelabs/trust-graph-test
1
0
Fork 0
mirror of https://github.com/fluencelabs/trust-graph-test synced 2025-04-25 15:42:26 +00:00
Code Issues Projects Releases Wiki Activity

add_trust: check trust issued_at timestamp

Browse Source
This commit is contained in:
Alexey Proshutinskiy 2021-09-24 16:32:19 +03:00
parent fc635c0ef5
commit 0978b2520d
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
service/src/service_api.rs
View File

@ -81,7 +81,6 @@ fn verify_trust(trust: Trust, issuer_peer_id: String, timestamp_sec: u64) -> Ver
verify_trust_impl(trust, issuer_peer_id, timestamp_sec).into() verify_trust_impl(trust, issuer_peer_id, timestamp_sec).into()
} }
// TODO: check issued_at earlier than timestamp_sec
#[marine] #[marine]
fn add_trust(trust: Trust, issuer_peer_id: String, timestamp_sec: u64) -> AddTrustResult { fn add_trust(trust: Trust, issuer_peer_id: String, timestamp_sec: u64) -> AddTrustResult {
add_trust_impl(trust, issuer_peer_id, timestamp_sec).into() add_trust_impl(trust, issuer_peer_id, timestamp_sec).into()

7
service/src/service_impl.rs
View File

@ -70,6 +70,8 @@ pub enum ServiceError {
), ),
#[error("you should use host peer.timestamp_sec to pass timestamp")] #[error("you should use host peer.timestamp_sec to pass timestamp")]
InvalidTimestampTetraplet, InvalidTimestampTetraplet,
#[error("Trust can't be issued later than the current timestamp")]
InvalidTrustTimestamp,
} }
fn parse_peer_id(peer_id: String) -> Result<PeerId, ServiceError> { fn parse_peer_id(peer_id: String) -> Result<PeerId, ServiceError> {
@ -184,6 +186,11 @@ pub fn add_trust_impl(
) -> Result<u32, ServiceError> { ) -> Result<u32, ServiceError> {
let public_key = extract_public_key(issuer_peer_id)?; let public_key = extract_public_key(issuer_peer_id)?;
check_timestamp_tetraplets(&marine_rs_sdk::get_call_parameters(), 2)?; check_timestamp_tetraplets(&marine_rs_sdk::get_call_parameters(), 2)?;
if trust.issued_at > timestamp_sec {
return Err(ServiceError::InvalidTrustTimestamp);
}
let mut tg = get_data().lock(); let mut tg = get_data().lock();
tg.add_trust( tg.add_trust(
&trust.try_into()?, &trust.try_into()?,