arnaucube
arnaucube/go-dvotePublic Self-hosted repository
CensusService: add `method` field required for signature

Signed-off-by: p4u <p4u@dabax.net>
p4u p4u@dabax.net
Mon, 18 Feb 2019 10:48:58 +0100
commit

f40dfc6ae07407905b7412698d1ea240a782ad96

parent

a4d8b87d9360d5d5d08574e71131872af7327645

2 files changed, 4 insertions(+), 4 deletions(-)

jump to
M cmd/censushttp/README.md → cmd/censushttp/README.md

@@ -43,7 +43,7 @@

## Signature -The signature provides authentication by signing a concatenation of the following strings (even if empty) without spaces: `censusId rootHash claimData timeStamp`. +The signature provides authentication by signing a concatenation of the following strings (even if empty) without spaces: `method censusId rootHash claimData timeStamp`. The `timeStamp` when received on the server side must not differ more than 10 seconds from the current UNIX time.
M service/census/censusmanager.go → service/census/censusmanager.go

@@ -118,9 +118,9 @@ op := c.Method

var err error // Process data - log.Printf("censusId:{%s} rootHash:{%s} claimData:{%s} proofData:{%s} timeStamp:{%s} signature:{%s}\n", - c.CensusID, c.RootHash, c.ClaimData, c.ProofData, c.TimeStamp, c.Signature) - authString := fmt.Sprintf("%s%s%s%s", c.CensusID, c.RootHash, c.ClaimData, c.TimeStamp) + log.Printf("censusId:{%s} method:{%s} rootHash:{%s} claimData:{%s} proofData:{%s} timeStamp:{%s} signature:{%s}\n", + c.CensusID, c.Method, c.RootHash, c.ClaimData, c.ProofData, c.TimeStamp, c.Signature) + authString := fmt.Sprintf("%s%s%s%s%s", c.Method, c.CensusID, c.RootHash, c.ClaimData, c.TimeStamp) resp.Error = false resp.Response = "" censusFound := false