{"header":{"message":"Implement new identity management","description":"The main data structure responsible for complete identity management, `identity::Complete`, contains the Author information, secret key, public key & other associated metadata. Various functions are implemented on the aforementioned struct that handle identity creation, modification, deletion & migration from the old format. These functions are then leveraged in `pijul/src/commands/identity.rs` to expose the functionality to the user.","timestamp":"2022-08-16T08:53:16.474676514Z","authors":[{}]},"hash":"4KJ45IJLTIE35KQZUSFMFS67RNENG4P2FZMKMULJLGGYMKJUVRSQC","authors":[{"login":"finchie","key":"6WCsL9cxQoPBLLwR1PUvmFBJi6wGTGFAxcxMovPQCwTZ"}],"deps":{"hashes":[["4KJ45IJLTIE35KQZUSFMFS67RNENG4P2FZMKMULJLGGYMKJUVRSQC","Implement new identity management"],["AA",null],["ZSFJT4SFIAS7WBODRZOFKKG4SVYBC5PC6XY75WYN7CCQ3SMV7IUQC","Allow remotes to have a different push and pull address"],["CXSCA5HNK3BSSUMZ2SZ5XNKSSHC2IFHPC35SMO5WMWVJBYEFSJTQC","Fixing a counter-intuitive error when a local repo does not exist"],["NAUECZW353R5RHT4GGQJIEZPA5EYRGQYTSP7IJNBJS3CXBSTNJDQC","Fixing the map between keys and identities"],["OFQY3GUUXYY5GTLHRH4NSZMLVXJRO67QK3TVDLNNOHZ7T66ZSRJAC","Formatting and versions"],["6ZHY3XTG6JIVKAJTEYS6IRZR3PTRRMISCQGIIPBXLUOCIL72TEWQC","Updating deprecated methods in clap"],["JL4WKA5PBKXRNAMETYO4I52QKASQ3COYHH2JKGA7W5YLIRZZH53AC","Implement the Sanakirja concurrency model in a cross-process way"],["UBCBQ5FGH2KASHEUPDLIKGLVVX3GSRQ4F4P2JEJZL2NX2DUSYARAC","Removing pijul/src/commands/checkout.rs (unused file), as well as litorg comments"],["SMMBFECLGSUKRZW5YPOQPOQCOY2CH2OTZXBSZ3KG2N3J3HQZ5PSAC","Converting to the new patch format \"online\""],["QL6K2ZM35B3NIXEMMCJWUSFXOBQHAGXRDMO7ID5DCKTJH4QJVY7QC","Tags"],["SXEYMYF7P4RZMZ46WPL4IZUTSQ2ATBWYZX7QNVMS3SGOYXYOHAGQC","Fixing the bad changes in history (unfortunately, by rebooting)."],["YTQS4ES362EJ27OE45CE5HLY7ZU57YLVKRMDRJ2OXT623VM5WOBQC","Fixing a parsing problem (related to permissions), and the associated permissions"],["EEBKW7VTILH6AGGV57ZIJ3DJGYHDSYBWGU3C7Q4WWAKSVNUGIYMQC","Keys and identities"],["OKE6SXPP34GKAXKZTWLNHRJRQQN32T3SQCSOWWC3GTV425ZF5Q6QC","improve docs, feedback for pijul key"],["X243Z3Y54ULINQMMRIKLHRV5T237B7VUOAHVJ7DMPOQ6A6GQXY2AC","Recording only the required metadata (can even be changed later!)"],["HDGRZISM2SS4TK5BMNGDIYG22SOXAZRTTC6YFIOPY4LSO53QDWZQC","Version updates"],["A3RM526Y7LUXNYW4TL56YKQ5GVOK2R5D7JJVTSQ6TT5MEXIR6YAAC","Integrating identity malleability"],["G65S7FAW4OHBGC6ROVPPZ6PPACKOFEM4KSMAWMYKNQF5OLVDJR2QC","Version bump and cleanup"],["QQZNSB26UHFC4EFFREJX2J7SWAKCB3UAI6OKKIOZ4BLXBK6M54VAC","Permission update (after #X243)"],["PIQCNEEBNHZDYOU2O7667XBB6D3V2MUALRRVJX6VO5BGYR7LTYRQC","Upgrading to Clap 3.0.0-alpha.5"]],"deps":["ZSFJT4SFIAS7WBODRZOFKKG4SVYBC5PC6XY75WYN7CCQ3SMV7IUQC","CXSCA5HNK3BSSUMZ2SZ5XNKSSHC2IFHPC35SMO5WMWVJBYEFSJTQC","NAUECZW353R5RHT4GGQJIEZPA5EYRGQYTSP7IJNBJS3CXBSTNJDQC","OFQY3GUUXYY5GTLHRH4NSZMLVXJRO67QK3TVDLNNOHZ7T66ZSRJAC","6ZHY3XTG6JIVKAJTEYS6IRZR3PTRRMISCQGIIPBXLUOCIL72TEWQC"],"known":["SXEYMYF7P4RZMZ46WPL4IZUTSQ2ATBWYZX7QNVMS3SGOYXYOHAGQC","UBCBQ5FGH2KASHEUPDLIKGLVVX3GSRQ4F4P2JEJZL2NX2DUSYARAC","JL4WKA5PBKXRNAMETYO4I52QKASQ3COYHH2JKGA7W5YLIRZZH53AC","G65S7FAW4OHBGC6ROVPPZ6PPACKOFEM4KSMAWMYKNQF5OLVDJR2QC","X243Z3Y54ULINQMMRIKLHRV5T237B7VUOAHVJ7DMPOQ6A6GQXY2AC","QQZNSB26UHFC4EFFREJX2J7SWAKCB3UAI6OKKIOZ4BLXBK6M54VAC","HDGRZISM2SS4TK5BMNGDIYG22SOXAZRTTC6YFIOPY4LSO53QDWZQC","YTQS4ES362EJ27OE45CE5HLY7ZU57YLVKRMDRJ2OXT623VM5WOBQC","QL6K2ZM35B3NIXEMMCJWUSFXOBQHAGXRDMO7ID5DCKTJH4QJVY7QC","EEBKW7VTILH6AGGV57ZIJ3DJGYHDSYBWGU3C7Q4WWAKSVNUGIYMQC","SMMBFECLGSUKRZW5YPOQPOQCOY2CH2OTZXBSZ3KG2N3J3HQZ5PSAC","A3RM526Y7LUXNYW4TL56YKQ5GVOK2R5D7JJVTSQ6TT5MEXIR6YAAC","PIQCNEEBNHZDYOU2O7667XBB6D3V2MUALRRVJX6VO5BGYR7LTYRQC","OKE6SXPP34GKAXKZTWLNHRJRQQN32T3SQCSOWWC3GTV425ZF5Q6QC"]},"hunks":[{"FileAdd":{"meta":{"basename":"identity","metadata":576},"context":[{"change":7,"pos":21414}],"contents":[]}},{"FileAdd":{"meta":{"basename":"repair.rs","metadata":0},"context":[{"change":0,"pos":20}],"contents":[{"Add":"use super::create::IdentityCreateError;"},{"Add":"use super::{get_valid_password, Complete};"},{"Add":"use crate::commands::Identity;"},{"Add":"use crate::config;"},{"Add":""},{"Add":"use libpijul::key::{PublicKey, SecretKey};"},{"Add":""},{"Add":"use std::convert::TryInto;"},{"Add":"use std::fs;"},{"Add":"use std::io::{Read, Write};"},{"Add":"use std::path::PathBuf;"},{"Add":""},{"Add":"use anyhow::{bail, Context};"},{"Add":"use log::debug;"},{"Add":"use thiserror::Error;"},{"Add":""},{"Add":"const FIRST_IDENTITY_MESSAGE: &str = \"It doesn't look like you have any identities configured!"},{"Add":"Each author in Pijul is identified by a unique key to provide greater security & flexibility over names/emails."},{"Add":"To make sure humans (including you!) can easily identify these keys, we need a few personal details."},{"Add":"For more information see https://pijul.org/manual/keys.html\";"},{"Add":""},{"Add":"const MIGRATE_IDENTITY_MESSAGE: &str ="},{"Add":" \"It seems you have configured an identity in an older version of Pijul, which uses an older identity format!"},{"Add":"Please take a moment to confirm your details are correct.\";"},{"Add":""},{"Add":"const MISMATCHED_KEYS_MESSAGE: &str = \"It seems the keys on your system are mismatched!"},{"Add":"This is most likely the result of data corruption, please check your drive and try again.\";"},{"Add":""},{"Add":"#[derive(Error, Debug)]"},{"Add":"pub enum IdentityParseError {"},{"Add":" #[error(\"Mismatching keys\")]"},{"Add":" MismatchingKeys,"},{"Add":" #[error(\"Could not find secret key at path {0}\")]"},{"Add":" NoSecretKey(PathBuf),"},{"Add":" #[error(transparent)]"},{"Add":" Other(#[from] anyhow::Error),"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub(super) struct PotentialPublicKey {"},{"Add":" pub key: PublicKey,"},{"Add":" pub generated_by: GeneratedBy,"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Debug)]"},{"Add":"pub(super) enum GeneratedBy {"},{"Add":" SecretKey,"},{"Add":" PublicKey,"},{"Add":" Identity,"},{"Add":"}"},{"Add":""},{"Add":"impl PotentialPublicKey {"},{"Add":" /// Loads all given public keys into an array."},{"Add":" ///"},{"Add":" /// # Arguments"},{"Add":" /// * `public_key` - The public key to validate"},{"Add":" /// * `identity` - The identity to validate"},{"Add":" /// * `secret_key` - The secret key to validate"},{"Add":" /// * `password` - The password used to decrypt the secret key"},{"Add":" /// * `name` - The name of the identity. This is encoded on-disk as identities/``"},{"Add":" pub(super) fn load_public_keys("},{"Add":" public_key: Option,"},{"Add":" identity: Option,"},{"Add":" secret_key: &SecretKey,"},{"Add":" password: Option,"},{"Add":" name: &str,"},{"Add":" ) -> Result, anyhow::Error> {"},{"Add":" // Construct a vec of all potential (not yet validated) public keys, and make sure they all match"},{"Add":" let mut public_keys: Vec = vec![];"},{"Add":""},{"Add":" let user_password = get_valid_password(secret_key, password, name)?;"},{"Add":""},{"Add":" public_keys.push(Self {"},{"Add":" key: secret_key.load(user_password.as_deref())?.public_key(),"},{"Add":" generated_by: GeneratedBy::SecretKey,"},{"Add":" });"},{"Add":""},{"Add":" if let Some(key) = public_key {"},{"Add":" public_keys.push(Self {"},{"Add":" key,"},{"Add":" generated_by: GeneratedBy::PublicKey,"},{"Add":" });"},{"Add":" }"},{"Add":""},{"Add":" if let Some(user_identity) = identity {"},{"Add":" public_keys.push(Self {"},{"Add":" key: user_identity.public_key,"},{"Add":" generated_by: GeneratedBy::Identity,"},{"Add":" });"},{"Add":" }"},{"Add":""},{"Add":" Ok(public_keys)"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Ensure that the user has at least one valid identity on disk."},{"Add":"///"},{"Add":"/// This function performs the following:"},{"Add":"/// * Migrate users from the old identity format"},{"Add":"/// * Validate all identity key pairs"},{"Add":"/// * Create a new identity if none exist"},{"Add":"///"},{"Add":"/// # Arguments"},{"Add":"/// * `no_prompt` - If the user should not be prompted for input."},{"Add":"pub async fn fix_identities(no_prompt: bool) -> Result<(), anyhow::Error> {"},{"Add":" let mut dir = config::global_config_dir().unwrap();"},{"Add":" dir.push(\"identities\");"},{"Add":" std::fs::create_dir_all(&dir)?;"},{"Add":" dir.pop();"},{"Add":""},{"Add":" let identities = Complete::load_all()?;"},{"Add":""},{"Add":" if identities.is_empty() {"},{"Add":" // This could be because the old format exists on disk, but if the"},{"Add":" // extraction fails then we can be fairly sure the user simply isn't set up"},{"Add":" let extraction_result = Complete::from_old_format(None);"},{"Add":""},{"Add":" let mut stderr = std::io::stderr();"},{"Add":""},{"Add":" match extraction_result {"},{"Add":" Ok(old_identity) => {"},{"Add":" // Migrate to new format"},{"Add":" writeln!(stderr, \"{MIGRATE_IDENTITY_MESSAGE}\")?;"},{"Add":""},{"Add":" // Confirm details then write to disk"},{"Add":" // match create_identity(Some(old_identity.clone()), no_prompt).await {"},{"Add":" if let Err(e) = old_identity.clone().create(no_prompt, true).await {"},{"Add":" match e {"},{"Add":" IdentityCreateError::ProveFailed(name) => writeln!(stderr, \"Failed to prove identity. You will still be able to create & sign patches, but until you run `pijul identity prove --name {name}` they will not be linked to your personal details. If you are on an enterprise network, perhaps try running with `--no-cert-check`\")?,"},{"Add":" IdentityCreateError::Other(err) => return Err(err),"},{"Add":" }"},{"Add":" };"},{"Add":""},{"Add":" // The identity is stored as the public key's signature on disk"},{"Add":" let identity_path = format!(\"identities/{}\", &old_identity.identity.public_key.key);"},{"Add":""},{"Add":" // Try to delete what remains of the old identities"},{"Add":" let paths_to_delete ="},{"Add":" vec![\"publickey.json\", \"secretkey.json\", identity_path.as_str()];"},{"Add":" for path in paths_to_delete {"},{"Add":" let file_path = dir.join(path);"},{"Add":" if file_path.exists() {"},{"Add":" debug!(\"Deleting old file: {file_path:?}\");"},{"Add":" fs::remove_file(file_path)?;"},{"Add":" } else {"},{"Add":" debug!(\"Could not delete old file (path not found): {file_path:?}\");"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" Err(e) => {"},{"Add":" match e {"},{"Add":" IdentityParseError::MismatchingKeys => {"},{"Add":" bail!(\"User must repair broken keys before continuing\");"},{"Add":" }"},{"Add":" IdentityParseError::NoSecretKey(_) => {"},{"Add":" // This is the user's first time setting up an identity"},{"Add":" if no_prompt {"},{"Add":" bail!(\"No identities configured\");"},{"Add":" }"},{"Add":""},{"Add":" writeln!(stderr, \"{FIRST_IDENTITY_MESSAGE}\")?;"},{"Add":" Complete::default()?.create(no_prompt, true).await?;"},{"Add":" }"},{"Add":" IdentityParseError::Other(err) => {"},{"Add":" bail!(err);"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" // Sanity check to make sure everything is in order"},{"Add":" for identity in Complete::load_all()? {"},{"Add":" identity.valid_keys()?;"},{"Add":" }"},{"Add":""},{"Add":" Ok(())"},{"Add":"}"},{"Add":""},{"Add":"impl Complete {"},{"Add":" /// Checks if the key pair on disk is valid"},{"Add":" fn valid_keys(&self) -> Result {"},{"Add":" let public_keys = PotentialPublicKey::load_public_keys("},{"Add":" None,"},{"Add":" Some(self.identity.clone()),"},{"Add":" &self.secret_key,"},{"Add":" self.password.clone(),"},{"Add":" &self.name,"},{"Add":" )?;"},{"Add":" if public_keys.len() >= 2 {"},{"Add":" let mut keys_iter = public_keys.iter();"},{"Add":" let first_key = keys_iter.next().unwrap();"},{"Add":""},{"Add":" let mut different_keys = vec![first_key];"},{"Add":" for key in keys_iter {"},{"Add":" if !different_keys.iter().any(|k| k.key == key.key) {"},{"Add":" different_keys.push(key);"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" if different_keys.len() != 1 {"},{"Add":" let mut stderr = std::io::stderr();"},{"Add":" writeln!(stderr, \"{MISMATCHED_KEYS_MESSAGE}\")?;"},{"Add":" writeln!(stderr, \"Got the following public key signatures:\")?;"},{"Add":""},{"Add":" for key in different_keys {"},{"Add":" let source = match key.generated_by {"},{"Add":" GeneratedBy::Identity => \"Identity\","},{"Add":" GeneratedBy::PublicKey => \"Public key\","},{"Add":" GeneratedBy::SecretKey => \"Secret key\","},{"Add":" };"},{"Add":""},{"Add":" writeln!(stderr, \"{} ({source})\", key.key.key)?;"},{"Add":" }"},{"Add":""},{"Add":" return Ok(false);"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" Ok(true)"},{"Add":" }"},{"Add":""},{"Add":" /// Migrate user from old to new identity format."},{"Add":" ///"},{"Add":" /// # Arguments"},{"Add":" /// * `password` - The password used to decrypt the secret key"},{"Add":" ///"},{"Add":" /// # Data format"},{"Add":" /// Data stored in the old format should look as follows:"},{"Add":" /// ```md"},{"Add":" /// .config/pijul/ (or applicable global config directory)"},{"Add":" /// ├── config.toml"},{"Add":" /// │ ├── Username"},{"Add":" /// │ ├── Full name"},{"Add":" /// │ └── Email"},{"Add":" /// ├── secretkey.json"},{"Add":" /// │ ├── Version"},{"Add":" /// │ ├── Algorithm"},{"Add":" /// │ └── Key"},{"Add":" /// ├── publickey.json"},{"Add":" /// │ ├── Version"},{"Add":" /// │ ├── Algorithm"},{"Add":" /// │ ├── Signature"},{"Add":" /// │ └── Key"},{"Add":" /// └── identities/"},{"Add":" /// └── (JSON, no extension)"},{"Add":" /// ├── Public key"},{"Add":" /// │ ├── Version"},{"Add":" /// │ ├── Algorithm"},{"Add":" /// │ ├── Signature"},{"Add":" /// │ └── Key"},{"Add":" /// ├── Login"},{"Add":" /// └── Last modified"},{"Add":" ///```"},{"Add":" ///"},{"Add":" /// As you can see, there is a lot of redundant data. We can leverage this"},{"Add":" /// information to repair partially corrupted state. For example, we can"},{"Add":" /// reconstruct `publickey.json` using the identity file. We are also able"},{"Add":" /// to reconstruct the public key from the private key, so the steps should"},{"Add":" /// look roughly as follows:"},{"Add":" /// 1. Extract secret key"},{"Add":" /// 2. Extract public key from (in order):"},{"Add":" /// 1. publickey.json"},{"Add":" /// 2. File in identities/"},{"Add":" /// 3. secretkey.json"},{"Add":" /// 3. Extract login info from (in order):"},{"Add":" /// 1. File in identities/"},{"Add":" /// 2. config.toml"},{"Add":" /// 4. Validate extracted data (query user to fill in blanks)"},{"Add":" fn from_old_format(mut password: Option) -> Result {"},{"Add":" let config_dir = config::global_config_dir().unwrap();"},{"Add":""},{"Add":" let config_path = config_dir.join(\"config.toml\");"},{"Add":" let identities_path = config_dir.join(\"identities\");"},{"Add":" let public_key_path = config_dir.join(\"publickey.json\");"},{"Add":" let secret_key_path = config_dir.join(\"secretkey.json\");"},{"Add":""},{"Add":" // If we don't have the private key, there is no chance of repairing"},{"Add":" // the data. This will also trigger if the data is not in the old format"},{"Add":" if !secret_key_path.exists() {"},{"Add":" return Err(IdentityParseError::NoSecretKey(secret_key_path));"},{"Add":" }"},{"Add":" // From this point, we can be in 2 states:"},{"Add":" // - Old identity format"},{"Add":" // - Broken/missing data"},{"Add":""},{"Add":" // Extract data from secretkey.json"},{"Add":" let mut secret_key_file ="},{"Add":" fs::File::open(&secret_key_path).context(\"Failed to open secret key file\")?;"},{"Add":" let mut secret_key_text = String::new();"},{"Add":" secret_key_file"},{"Add":" .read_to_string(&mut secret_key_text)"},{"Add":" .context(\"Failed to read secret key file\")?;"},{"Add":" let secret_key: SecretKey ="},{"Add":" serde_json::from_str(&secret_key_text).context(\"Failed to parse secret key file\")?;"},{"Add":""},{"Add":" // Extract data from publickey.json"},{"Add":" // TODO: handle public key not existing"},{"Add":" let public_key: PublicKey = if public_key_path.exists() {"},{"Add":" let mut public_key_file ="},{"Add":" fs::File::open(&public_key_path).context(\"Failed to open public key file\")?;"},{"Add":" let mut public_key_text = String::new();"},{"Add":" public_key_file"},{"Add":" .read_to_string(&mut public_key_text)"},{"Add":" .context(\"Failed to read public key file\")?;"},{"Add":""},{"Add":" serde_json::from_str(&public_key_text).context(\"Failed to parse public key file\")?"},{"Add":" } else {"},{"Add":" return Err(IdentityParseError::Other(anyhow::anyhow!("},{"Add":" \"Public key does not exist!\""},{"Add":" )));"},{"Add":" };"},{"Add":""},{"Add":" // Extract valid identities"},{"Add":" let identity: Option = if identities_path.exists() {"},{"Add":" if identities_path.is_dir() {"},{"Add":" let identities_iter ="},{"Add":" fs::read_dir(identities_path).context(\"Failed to read identities directory\")?;"},{"Add":" let mut identities: Vec = vec![];"},{"Add":""},{"Add":" // We only need to keep the valid files"},{"Add":" for dir_entry in identities_iter {"},{"Add":" let path = dir_entry.unwrap().path();"},{"Add":""},{"Add":" if path.is_file() {"},{"Add":" // Try and deserialize the data. If it fails, there is"},{"Add":" // a fairly high chance it's not what we need"},{"Add":" let mut identity_file ="},{"Add":" fs::File::open(&path).context(\"Failed to open identity file\")?;"},{"Add":" let mut identity_text = String::new();"},{"Add":" identity_file"},{"Add":" .read_to_string(&mut identity_text)"},{"Add":" .context(\"Failed to read identity file\")?;"},{"Add":" let deserialization_result: Result ="},{"Add":" serde_json::from_str(&identity_text);"},{"Add":""},{"Add":" if deserialization_result.is_ok() {"},{"Add":" identities.push("},{"Add":" deserialization_result"},{"Add":" .context(\"Failed to deserialize identity file\")?,"},{"Add":" );"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" if identities.len() == 1 {"},{"Add":" Some(identities[0].clone())"},{"Add":" } else {"},{"Add":" None"},{"Add":" }"},{"Add":" } else {"},{"Add":" None"},{"Add":" }"},{"Add":" } else {"},{"Add":" None"},{"Add":" };"},{"Add":""},{"Add":" let author: config::Author = if config_path.exists() {"},{"Add":" let mut config_file ="},{"Add":" fs::File::open(&config_path).context(\"Failed to open config file\")?;"},{"Add":" let mut config_text = String::new();"},{"Add":" config_file"},{"Add":" .read_to_string(&mut config_text)"},{"Add":" .context(\"Failed to read config file\")?;"},{"Add":""},{"Add":" let config_data: config::Global ="},{"Add":" toml::from_str(&config_text).context(\"Failed to parse config file\")?;"},{"Add":" config_data.author"},{"Add":" } else {"},{"Add":" let login = identity"},{"Add":" .as_ref()"},{"Add":" .map_or_else(String::new, |x| x.login.clone());"},{"Add":" config::Author {"},{"Add":" login,"},{"Add":" email: None,"},{"Add":" full_name: None,"},{"Add":" }"},{"Add":" };"},{"Add":""},{"Add":" let origin = if let Some(id) = identity {"},{"Add":" id.origin"},{"Add":" } else {"},{"Add":" String::new()"},{"Add":" };"},{"Add":""},{"Add":" // If the secret is encrypted, prompt for password"},{"Add":" password = get_valid_password(&secret_key, password.clone(), \"\")?;"},{"Add":""},{"Add":" let identity = Self::new("},{"Add":" String::from(\"default\"),"},{"Add":" password,"},{"Add":" secret_key,"},{"Add":" Identity {"},{"Add":" login: author.login,"},{"Add":" name: author.full_name,"},{"Add":" email: author.email,"},{"Add":" origin,"},{"Add":" last_modified: chrono::DateTime::timestamp(&chrono::offset::Utc::now())"},{"Add":" .try_into()"},{"Add":" .context(\"Failed to create UNIX timestamp\")?,"},{"Add":" public_key,"},{"Add":" },"},{"Add":" true,"},{"Add":" );"},{"Add":""},{"Add":" if identity.valid_keys()? {"},{"Add":" Ok(identity)"},{"Add":" } else {"},{"Add":" Err(IdentityParseError::MismatchingKeys)"},{"Add":" }"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"mod.rs","metadata":0},"context":[{"change":0,"pos":20}],"contents":[{"Add":"//! Complete identity management."},{"Add":"//!"},{"Add":"//! Pijul uses keys, rather than personal details such as names or emails to attribute changes."},{"Add":"//! The user can have multiple identities on disk, each with completely unique details. For more"},{"Add":"//! information see [the manual](https://pijul.com/manual/keys.html)."},{"Add":"//!"},{"Add":"//! This module implements various functionality useful for managing identities on disk."},{"Add":"//! The current format for storing identities is as follows:"},{"Add":"//! ```md"},{"Add":"//! .config/pijul/ (or applicable global config directory)"},{"Add":"//! ├── config.toml (global defaults)"},{"Add":"//! │ ├── Username"},{"Add":"//! │ ├── Full name"},{"Add":"//! │ └── Email"},{"Add":"//! └── identities/"},{"Add":"//! └── /"},{"Add":"//! ├── identity.toml"},{"Add":"//! │ ├── Username"},{"Add":"//! │ ├── Full name"},{"Add":"//! │ ├── Email"},{"Add":"//! │ └── Public key"},{"Add":"//! │ ├── Version"},{"Add":"//! │ ├── Algorithm"},{"Add":"//! │ ├── Key"},{"Add":"//! │ └── Signature"},{"Add":"//! └── secret_key.json"},{"Add":"//! ├── Version"},{"Add":"//! ├── Algorithm"},{"Add":"//! └── Key"},{"Add":"//! ```"},{"Add":""},{"Add":"#![deny(clippy::all)]"},{"Add":"#![warn(clippy::pedantic)]"},{"Add":"#![warn(clippy::nursery)]"},{"Add":"#![warn(clippy::cargo)]"},{"Add":""},{"Add":"mod create;"},{"Add":"mod load;"},{"Add":"mod repair;"},{"Add":""},{"Add":"pub use create::NO_CERT_CHECK;"},{"Add":"pub use load::{choose_identity_name, decrypt_secret_key, public_key};"},{"Add":"pub use repair::fix_identities;"},{"Add":""},{"Add":"use crate::config;"},{"Add":"use crate::Identity;"},{"Add":""},{"Add":"use libpijul::key::{SKey, SecretKey};"},{"Add":""},{"Add":"use std::convert::TryInto;"},{"Add":"use std::fmt::Display;"},{"Add":"use std::fs;"},{"Add":"use std::io::{Read, Write};"},{"Add":""},{"Add":"use dialoguer::Password;"},{"Add":""},{"Add":"#[derive(Clone, Debug)]"},{"Add":"/// A complete user identity, representing the secret key, public key, and user info"},{"Add":"pub struct Complete {"},{"Add":" pub name: String,"},{"Add":" pub password: Option,"},{"Add":" pub secret_key: SecretKey,"},{"Add":" pub identity: Identity,"},{"Add":" pub link_remote: bool,"},{"Add":"}"},{"Add":""},{"Add":"impl Complete {"},{"Add":" /// Creates a new identity"},{"Add":" ///"},{"Add":" /// # Arguments"},{"Add":" /// * `name` - The name of the identity. This is encoded on-disk as identities/``"},{"Add":" /// * `password` - Password used to decrypt the secret key"},{"Add":" /// * `secret_key` - The corresponding secret key"},{"Add":" /// * `identity` - Information about the author including name, email, login"},{"Add":" /// * `link_remote` - If this identity should be linked with a remote (e.g. the Nest)"},{"Add":" pub const fn new("},{"Add":" name: String,"},{"Add":" password: Option,"},{"Add":" secret_key: SecretKey,"},{"Add":" identity: Identity,"},{"Add":" link_remote: bool,"},{"Add":" ) -> Self {"},{"Add":" Self {"},{"Add":" name,"},{"Add":" password,"},{"Add":" secret_key,"},{"Add":" identity,"},{"Add":" link_remote,"},{"Add":" }"},{"Add":" }"},{"Add":" /// Creates the default identity, inferring details from the user's profile"},{"Add":" pub fn default() -> Result {"},{"Add":" let config_path = config::global_config_dir().unwrap().join(\"config.toml\");"},{"Add":" let author: config::Author = if config_path.exists() {"},{"Add":" let mut config_file = fs::File::open(&config_path)?;"},{"Add":" let mut config_text = String::new();"},{"Add":" config_file.read_to_string(&mut config_text)?;"},{"Add":""},{"Add":" let global_config: config::Global = toml::from_str(&config_text)?;"},{"Add":" global_config.author"},{"Add":" } else {"},{"Add":" config::Author {"},{"Add":" login: String::new(),"},{"Add":" email: None,"},{"Add":" full_name: Some(whoami::realname()),"},{"Add":" }"},{"Add":" };"},{"Add":""},{"Add":" let secret_key = SKey::generate(None);"},{"Add":" let public_key = secret_key.public_key();"},{"Add":""},{"Add":" Ok(Self::new("},{"Add":" String::from(\"default\"),"},{"Add":" None,"},{"Add":" secret_key.save(None),"},{"Add":" Identity {"},{"Add":" login: author.login,"},{"Add":" name: author.full_name,"},{"Add":" origin: String::from(\"ssh.pijul.com\"),"},{"Add":" email: author.email,"},{"Add":" last_modified: chrono::DateTime::timestamp(&chrono::offset::Utc::now())"},{"Add":" .try_into()?,"},{"Add":" public_key,"},{"Add":" },"},{"Add":" true,"},{"Add":" ))"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"// Implement Display so that the user can select identities from the fuzzy matcher"},{"Add":"impl Display for Complete {"},{"Add":" fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {"},{"Add":" // Try and jog the user's memory by giving them a bit more context"},{"Add":" let has_username = !self.identity.login.is_empty();"},{"Add":" let has_remote = !self.identity.origin.is_empty();"},{"Add":""},{"Add":" let remote_details: Option = if has_username && has_remote {"},{"Add":" Some(format!("},{"Add":" \" [{}@{}]\","},{"Add":" self.identity.login, self.identity.origin"},{"Add":" ))"},{"Add":" } else if has_username {"},{"Add":" Some(format!(\" [@{}]\", self.identity.login))"},{"Add":" } else if has_remote {"},{"Add":" Some(format!(\" [:{}]\", self.identity.origin))"},{"Add":" } else {"},{"Add":" None"},{"Add":" };"},{"Add":""},{"Add":" write!(f, \"{}{}\", self.name, remote_details.unwrap_or_default())"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Loads a password, either from the keychain or from user input"},{"Add":"///"},{"Add":"/// # Arguments"},{"Add":"/// * `name` - The name of the identity. This is encoded on-disk as identities/``"},{"Add":"fn load_password(name: &str) -> Result, anyhow::Error> {"},{"Add":" if let Ok(password) = keyring::Entry::new(\"pijul\", name).get_password() {"},{"Add":" if password.is_empty() {"},{"Add":" return Ok(None);"},{"Add":" }"},{"Add":""},{"Add":" return Ok(Some(password));"},{"Add":" }"},{"Add":""},{"Add":" let pw = Password::with_theme(config::load_theme()?.as_ref())"},{"Add":" .with_prompt(\"Password for secret key\")"},{"Add":" .allow_empty_password(true)"},{"Add":" .interact()?;"},{"Add":""},{"Add":" if pw.is_empty() {"},{"Add":" Ok(None)"},{"Add":" } else {"},{"Add":" Ok(Some(pw))"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"/// Validates a given password, prompting for user input if needed."},{"Add":"///"},{"Add":"/// # Arguments"},{"Add":"/// * `secret_key` - The secret key to decrypt"},{"Add":"/// * `password` - The password to validate"},{"Add":"/// * `name` - The name of the identity. This is encoded on-disk as identities/``"},{"Add":"pub fn get_valid_password("},{"Add":" secret_key: &SecretKey,"},{"Add":" password: Option,"},{"Add":" name: &str,"},{"Add":") -> Result, anyhow::Error> {"},{"Add":" if secret_key.encryption.is_some() || secret_key.load(None).is_err() {"},{"Add":" if secret_key.load(password.as_deref()).is_ok() {"},{"Add":" Ok(password)"},{"Add":" } else {"},{"Add":" let mut user_password = load_password(name)?;"},{"Add":""},{"Add":" // If the user enters the wrong password, reprompt"},{"Add":" let mut stderr = std::io::stderr();"},{"Add":" while secret_key.load(user_password.as_deref()).is_err() {"},{"Add":" writeln!(stderr, \"Incorrect password! Please try again.\")?;"},{"Add":" user_password = load_password(name)?;"},{"Add":" }"},{"Add":""},{"Add":" Ok(user_password)"},{"Add":" }"},{"Add":" } else {"},{"Add":" Ok(None)"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"load.rs","metadata":0},"context":[{"change":0,"pos":20}],"contents":[{"Add":"use super::fix_identities;"},{"Add":"use super::get_valid_password;"},{"Add":"use super::Complete;"},{"Add":"use crate::config;"},{"Add":"use crate::Identity;"},{"Add":""},{"Add":"use libpijul::key::{PublicKey, SecretKey};"},{"Add":""},{"Add":"use std::fs;"},{"Add":"use std::path::Path;"},{"Add":"use std::path::PathBuf;"},{"Add":""},{"Add":"use anyhow::bail;"},{"Add":"use dialoguer::FuzzySelect;"},{"Add":"use once_cell::sync::OnceCell;"},{"Add":""},{"Add":"static CHOSEN_IDENTITY: OnceCell = OnceCell::new();"},{"Add":""},{"Add":"/// Returns the directory in which identity information should be stored."},{"Add":"///"},{"Add":"/// # Arguments"},{"Add":"/// * `name` - The name of the identity. This is encoded on-disk as identities/``"},{"Add":"/// * `should_exist` - If the path should already exist."},{"Add":"///"},{"Add":"/// # Errors"},{"Add":"/// * An identity of `name` does not exist"},{"Add":"/// * The identity name is empty"},{"Add":"pub fn path(name: &str, should_exist: bool) -> Result {"},{"Add":" let mut path = config::global_config_dir()"},{"Add":" .expect(\"Could not find global config directory\")"},{"Add":" .join(\"identities\");"},{"Add":""},{"Add":" if name.is_empty() {"},{"Add":" bail!(\"Cannot get path of un-named identity\");"},{"Add":" }"},{"Add":""},{"Add":" path.push(name);"},{"Add":" if !path.exists() && should_exist {"},{"Add":" bail!(\"Cannot get identity path: name does not exist\")"},{"Add":" }"},{"Add":""},{"Add":" Ok(path)"},{"Add":"}"},{"Add":""},{"Add":"/// Returns the public key for identity named ."},{"Add":"///"},{"Add":"/// # Arguments"},{"Add":"/// * `name` - The name of the identity. This is encoded on-disk as identities/``"},{"Add":"pub fn public_key(name: &str) -> Result {"},{"Add":" let text = fs::read_to_string(path(name, true)?.join(\"identity.toml\"))?;"},{"Add":" let identity: Identity = toml::from_str(&text)?;"},{"Add":""},{"Add":" Ok(identity.public_key)"},{"Add":"}"},{"Add":""},{"Add":"/// Returns the secret key for identity named ."},{"Add":"///"},{"Add":"/// # Arguments"},{"Add":"/// * `name` - The name of the identity. This is encoded on-disk as identities/``"},{"Add":"pub fn secret_key(name: &str) -> Result {"},{"Add":" let identity_text = fs::read_to_string(path(name, true)?.join(\"secret_key.json\"))?;"},{"Add":" let secret_key: SecretKey = serde_json::from_str(&identity_text)?;"},{"Add":""},{"Add":" Ok(secret_key)"},{"Add":"}"},{"Add":""},{"Add":"/// Choose an identity, either through defaults or a user prompt."},{"Add":"///"},{"Add":"/// # Arguments"},{"Add":"/// * `no_prompt` - If the user should not be prompted for input."},{"Add":"///"},{"Add":"/// # Errors"},{"Add":"/// * User input is required to continue, but `no_prompt` is set to true"},{"Add":"pub async fn choose_identity_name(no_prompt: bool) -> Result {"},{"Add":" if let Some(name) = CHOSEN_IDENTITY.get() {"},{"Add":" return Ok(name.clone());"},{"Add":" }"},{"Add":""},{"Add":" let mut possible_identities = Complete::load_all()?;"},{"Add":" if possible_identities.is_empty() {"},{"Add":" fix_identities(no_prompt).await?;"},{"Add":" possible_identities = Complete::load_all()?;"},{"Add":" }"},{"Add":""},{"Add":" let chosen_name = if possible_identities.len() == 1 {"},{"Add":" possible_identities[0].clone().name"},{"Add":" } else if no_prompt {"},{"Add":" bail!(\"Cannot prompt user to choose identity (--no-prompt is set)\");"},{"Add":" } else {"},{"Add":" let index = FuzzySelect::with_theme(config::load_theme()?.as_ref())"},{"Add":" .with_prompt(\"Select identity\")"},{"Add":" .items(&possible_identities)"},{"Add":" .default(0)"},{"Add":" .interact()?;"},{"Add":""},{"Add":" possible_identities[index].clone().name"},{"Add":" };"},{"Add":""},{"Add":" // The user has selected once, don't want to query them again"},{"Add":" CHOSEN_IDENTITY"},{"Add":" .set(chosen_name.clone())"},{"Add":" .expect(\"Could not set chosen identity\");"},{"Add":""},{"Add":" Ok(chosen_name)"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(unix)]"},{"Add":"pub fn open_secret_file(path: &Path) -> Result {"},{"Add":" use std::fs::OpenOptions;"},{"Add":" use std::os::unix::fs::OpenOptionsExt;"},{"Add":" OpenOptions::new()"},{"Add":" .write(true)"},{"Add":" .create(true)"},{"Add":" .mode(0o600)"},{"Add":" .open(path)"},{"Add":"}"},{"Add":""},{"Add":"#[cfg(not(unix))]"},{"Add":"pub fn open_secret_file(path: &Path) -> Result {"},{"Add":" std::fs::File::create(path)"},{"Add":"}"},{"Add":""},{"Add":"/// Decrypts the secret key associated with the given identity name. If the given password is invalid, the user may be prompted."},{"Add":"///"},{"Add":"/// # Arguments"},{"Add":"/// * `identity_name` - The name of the identity. This is encoded on-disk as identities/``"},{"Add":"/// * `password` - The password used to attempt decryption"},{"Add":"pub fn decrypt_secret_key("},{"Add":" identity_name: &str,"},{"Add":" password: Option,"},{"Add":") -> Result<(libpijul::key::SecretKey, libpijul::key::SKey), anyhow::Error> {"},{"Add":" let secret_key = secret_key(identity_name)?;"},{"Add":" let password = get_valid_password(&secret_key, password, identity_name)?;"},{"Add":" let decrypted_key = secret_key.load(password.as_deref())?;"},{"Add":""},{"Add":" Ok((secret_key, decrypted_key))"},{"Add":"}"},{"Add":""},{"Add":"impl Complete {"},{"Add":" /// Loads a complete identity associated with the given identity name."},{"Add":" ///"},{"Add":" /// # Arguments"},{"Add":" /// * `identity_name` - The name of the identity. This is encoded on-disk as identities/``"},{"Add":" pub fn load(identity_name: &str) -> Result {"},{"Add":" let identity_path = path(identity_name, true)?;"},{"Add":""},{"Add":" let text = fs::read_to_string(identity_path.join(\"identity.toml\"))?;"},{"Add":" let identity: Identity = toml::from_str(&text)?;"},{"Add":""},{"Add":" let secret_key = secret_key(identity_name)?;"},{"Add":""},{"Add":" Ok(Self::new("},{"Add":" identity_name.to_string(),"},{"Add":" None,"},{"Add":" secret_key,"},{"Add":" identity,"},{"Add":" true,"},{"Add":" ))"},{"Add":" }"},{"Add":""},{"Add":" /// Loads all valid identities found on disk"},{"Add":" pub fn load_all() -> Result, anyhow::Error> {"},{"Add":" let config_dir = config::global_config_dir().unwrap();"},{"Add":" let identities_path = config_dir.join(\"identities\");"},{"Add":" std::fs::create_dir_all(&identities_path)?;"},{"Add":""},{"Add":" let identities_dir = identities_path.as_path().read_dir()?;"},{"Add":" let mut identities = vec![];"},{"Add":""},{"Add":" for dir_entry in identities_dir {"},{"Add":" let file_name = dir_entry?.file_name();"},{"Add":" let identity_name = file_name.to_str().unwrap();"},{"Add":""},{"Add":" if let Ok(identity) = Self::load(identity_name) {"},{"Add":" identities.push(identity);"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" Ok(identities)"},{"Add":" }"},{"Add":"}"}]}},{"FileAdd":{"meta":{"basename":"create.rs","metadata":0},"context":[{"change":0,"pos":20}],"contents":[{"Add":"use super::load::path;"},{"Add":"use super::{get_valid_password, Complete};"},{"Add":"use crate::config;"},{"Add":"use crate::config::Direction;"},{"Add":"use crate::repository::Repository;"},{"Add":"use crate::Identity;"},{"Add":""},{"Add":"use std::io::Write;"},{"Add":"use std::{convert::TryInto, fs};"},{"Add":""},{"Add":"use anyhow::{bail, Context};"},{"Add":"use dialoguer::{Confirm, Input, Password};"},{"Add":"use keyring::Entry;"},{"Add":"use log::{debug, warn};"},{"Add":"use once_cell::sync::OnceCell;"},{"Add":"use thiserror::Error;"},{"Add":""},{"Add":"pub static NO_CERT_CHECK: OnceCell = OnceCell::new();"},{"Add":""},{"Add":"#[derive(Error, Debug)]"},{"Add":"pub enum IdentityCreateError {"},{"Add":" #[error(\"Could not prove identity {0}. Please check your credentials & network connection. If you are on an enterprise network, perhaps try running with `--no-cert-check`\")]"},{"Add":" ProveFailed(String),"},{"Add":" #[error(transparent)]"},{"Add":" Other(#[from] anyhow::Error),"},{"Add":"}"},{"Add":""},{"Add":"impl Complete {"},{"Add":" /// Prompt the user to make changes to an identity."},{"Add":" ///"},{"Add":" /// # Arguments"},{"Add":" /// * `replace_current` - If the new identity will replace an existing one"},{"Add":" pub fn prompt_changes(mut self, replace_current: bool) -> Result {"},{"Add":" let config = config::load_theme()?;"},{"Add":""},{"Add":" let identity_name: String = Input::with_theme(config.as_ref())"},{"Add":" .with_prompt(\"Unique identity name\")"},{"Add":" .default(String::from(\"default\"))"},{"Add":" .allow_empty(false)"},{"Add":" .with_initial_text(if replace_current {"},{"Add":" self.name"},{"Add":" } else {"},{"Add":" String::new()"},{"Add":" })"},{"Add":" .validate_with(move |input: &String| -> Result<(), String> {"},{"Add":" match Self::load(input) {"},{"Add":" Ok(existing_identity) => {"},{"Add":" if replace_current {"},{"Add":" // The user is trying to edit an existing identity"},{"Add":" Ok(())"},{"Add":" } else {"},{"Add":" Err(format!(\"That identity already exists: {existing_identity}\",))"},{"Add":" }"},{"Add":" }"},{"Add":" Err(_) => Ok(()),"},{"Add":" }"},{"Add":" })"},{"Add":" .interact_text()?;"},{"Add":""},{"Add":" let full_name: String = Input::with_theme(config.as_ref())"},{"Add":" .with_prompt(\"Display name\")"},{"Add":" .allow_empty(true)"},{"Add":" .default(whoami::realname())"},{"Add":" .with_initial_text(if replace_current {"},{"Add":" self.identity.name.unwrap_or_default()"},{"Add":" } else {"},{"Add":" String::new()"},{"Add":" })"},{"Add":" .interact_text()?;"},{"Add":""},{"Add":" let user_email: String = Input::with_theme(config.as_ref())"},{"Add":" .with_prompt(\"Email (leave blank for none)\")"},{"Add":" .allow_empty(true)"},{"Add":" .with_initial_text(self.identity.email.unwrap_or_default())"},{"Add":" .validate_with(move |input: &String| -> Result<(), &str> {"},{"Add":" if input.is_empty() || validator::validate_email(input) {"},{"Add":" Ok(())"},{"Add":" } else {"},{"Add":" Err(\"Invalid email address\")"},{"Add":" }"},{"Add":" })"},{"Add":" .interact_text()?;"},{"Add":" let email: Option = if user_email.is_empty() {"},{"Add":" None"},{"Add":" } else {"},{"Add":" Some(user_email)"},{"Add":" };"},{"Add":""},{"Add":" let expiry_message = self"},{"Add":" .identity"},{"Add":" .public_key"},{"Add":" .expires"},{"Add":" .map(|date| date.format(\"%Y-%m-%d %H:%M:%S\").to_string());"},{"Add":""},{"Add":" let expiry = if Confirm::with_theme(config.as_ref())"},{"Add":" .with_prompt(format!("},{"Add":" \"Do you want this key to expire? (Current expiry: {})\","},{"Add":" expiry_message"},{"Add":" .clone()"},{"Add":" .unwrap_or_else(|| String::from(\"never\"))"},{"Add":" ))"},{"Add":" .default(false)"},{"Add":" .interact()?"},{"Add":" {"},{"Add":" let time_stamp: String = Input::with_theme(config.as_ref())"},{"Add":" .with_prompt(\"Expiry date (YYYY-MM-DD)\")"},{"Add":" .with_initial_text(expiry_message.unwrap_or_default())"},{"Add":" .validate_with(move |input: &String| -> Result<(), &str> {"},{"Add":" let parsed_date = dateparser::parse_with_timezone(input, &chrono::offset::Utc);"},{"Add":" if parsed_date.is_err() {"},{"Add":" return Err(\"Invalid date\");"},{"Add":" }"},{"Add":""},{"Add":" let date = parsed_date.unwrap();"},{"Add":" if chrono::offset::Utc::now().timestamp_millis() > date.timestamp_millis() {"},{"Add":" Err(\"Date is in the past\")"},{"Add":" } else {"},{"Add":" Ok(())"},{"Add":" }"},{"Add":" })"},{"Add":" .interact_text()?;"},{"Add":""},{"Add":" Some(dateparser::parse_with_timezone("},{"Add":" &time_stamp,"},{"Add":" &chrono::offset::Utc,"},{"Add":" )?)"},{"Add":" } else {"},{"Add":" None"},{"Add":" };"},{"Add":""},{"Add":" let link_remote: bool = Confirm::with_theme(config.as_ref())"},{"Add":" .with_prompt(\"Do you want to link this identity to a remote?\")"},{"Add":" .default(self.link_remote)"},{"Add":" .interact()?;"},{"Add":""},{"Add":" let user_name = if link_remote {"},{"Add":" Input::with_theme(config.as_ref())"},{"Add":" .with_prompt(\"Remote username\")"},{"Add":" .default(whoami::username())"},{"Add":" .with_initial_text(self.identity.login)"},{"Add":" .interact_text()?"},{"Add":" } else {"},{"Add":" String::new()"},{"Add":" };"},{"Add":""},{"Add":" let remote_url = if link_remote {"},{"Add":" Input::with_theme(config.as_ref())"},{"Add":" .with_prompt(\"Remote URL\")"},{"Add":" .with_initial_text(if replace_current {"},{"Add":" self.identity.origin"},{"Add":" } else {"},{"Add":" String::new()"},{"Add":" })"},{"Add":" .default(String::from(\"ssh.pijul.com\"))"},{"Add":" .interact_text()?"},{"Add":" } else {"},{"Add":" String::new()"},{"Add":" };"},{"Add":""},{"Add":" let change_password = Confirm::with_theme(config.as_ref())"},{"Add":" .with_prompt(&format!("},{"Add":" \"Do you want to change the encryption? (Current status: {})\","},{"Add":" self.secret_key"},{"Add":" .encryption"},{"Add":" .clone()"},{"Add":" .map_or(\"not encrypted\", |_| \"encrypted\")"},{"Add":" ))"},{"Add":" .default(false)"},{"Add":" .interact()?;"},{"Add":""},{"Add":" let password = if change_password {"},{"Add":" let user_password = Password::with_theme(config.as_ref())"},{"Add":" .with_prompt(\"Secret key password\")"},{"Add":" .allow_empty_password(true)"},{"Add":" .with_confirmation(\"Confirm password\", \"Password mismatch\")"},{"Add":" .interact()?;"},{"Add":""},{"Add":" let pass = if user_password.is_empty() {"},{"Add":" None"},{"Add":" } else {"},{"Add":" Some(user_password)"},{"Add":" };"},{"Add":""},{"Add":" // Update the key pair to match this new password"},{"Add":" let loaded_key = self.secret_key.clone().load("},{"Add":" get_valid_password(&self.secret_key, self.password, &identity_name)?.as_deref(),"},{"Add":" )?;"},{"Add":" self.identity.public_key = loaded_key.public_key();"},{"Add":" self.secret_key = loaded_key.save(pass.as_deref());"},{"Add":""},{"Add":" pass"},{"Add":" } else {"},{"Add":" self.password"},{"Add":" };"},{"Add":""},{"Add":" // Update the expiry AFTER potential secret key reset"},{"Add":" self.identity.public_key.expires = expiry;"},{"Add":""},{"Add":" Ok(Self::new("},{"Add":" identity_name,"},{"Add":" password,"},{"Add":" self.secret_key,"},{"Add":" Identity {"},{"Add":" public_key: self.identity.public_key,"},{"Add":" login: user_name,"},{"Add":" name: Some(full_name),"},{"Add":" origin: remote_url,"},{"Add":" email,"},{"Add":" last_modified: chrono::DateTime::timestamp(&chrono::offset::Utc::now())"},{"Add":" .try_into()?,"},{"Add":" },"},{"Add":" link_remote,"},{"Add":" ))"},{"Add":" }"},{"Add":""},{"Add":" /// Write an identity to disk."},{"Add":" ///"},{"Add":" /// # Arguments"},{"Add":" /// * `replace_current` - If the new identity will replace an existing one"},{"Add":" fn write(&self, replace_current: bool) -> Result<(), anyhow::Error> {"},{"Add":" if let Ok(existing_identity) = Self::load(&self.name) {"},{"Add":" if !replace_current {"},{"Add":" bail!(\"An identity with that name already exists: {existing_identity}\");"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" // Write the relevant identity files"},{"Add":" let identity_dir = path(&self.name, false)?;"},{"Add":""},{"Add":" std::fs::create_dir_all(&identity_dir)?;"},{"Add":""},{"Add":" let config_data = toml::to_string_pretty(&self.identity)?;"},{"Add":" let mut config_file = std::fs::File::create(identity_dir.join(\"identity.toml\"))?;"},{"Add":" config_file.write_all(config_data.as_bytes())?;"},{"Add":""},{"Add":" let key_data = serde_json::to_string_pretty(&self.secret_key)?;"},{"Add":" let mut key_file = super::load::open_secret_file(&identity_dir.join(\"secret_key.json\"))?;"},{"Add":" key_file.write_all(key_data.as_bytes())?;"},{"Add":""},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Associate a generated key with a remote identity. Patches authored"},{"Add":" /// by unproven keys will only display the key as the author."},{"Add":" pub async fn prove(&self, no_cert_check: bool) -> Result<(), anyhow::Error> {"},{"Add":" let mut stderr = std::io::stderr();"},{"Add":" writeln!("},{"Add":" stderr,"},{"Add":" \"Linking identity {}@{}\","},{"Add":" &self.identity.login, &self.identity.origin"},{"Add":" )?;"},{"Add":""},{"Add":" let remote = self.identity.origin.clone();"},{"Add":" let mut remote = if let Ok(repo) = Repository::find_root(None) {"},{"Add":" use crate::remote::RemoteRepo;"},{"Add":" if let RemoteRepo::Ssh(ssh) = repo"},{"Add":" .remote("},{"Add":" None,"},{"Add":" &remote,"},{"Add":" crate::DEFAULT_CHANNEL,"},{"Add":" Direction::Pull,"},{"Add":" no_cert_check,"},{"Add":" false,"},{"Add":" )"},{"Add":" .await?"},{"Add":" {"},{"Add":" ssh"},{"Add":" } else {"},{"Add":" bail!(\"No such remote: {}\", remote)"},{"Add":" }"},{"Add":" } else if let Some(mut ssh) = crate::remote::ssh::ssh_remote(&remote, false) {"},{"Add":" if let Some(c) = ssh.connect(&remote, crate::DEFAULT_CHANNEL).await? {"},{"Add":" c"},{"Add":" } else {"},{"Add":" bail!(\"No such remote: {}\", remote)"},{"Add":" }"},{"Add":" } else {"},{"Add":" bail!(\"No such remote: {}\", remote)"},{"Add":" };"},{"Add":""},{"Add":" let (_, key) = super::load::decrypt_secret_key(&self.name, None)?;"},{"Add":" remote.prove(key).await?;"},{"Add":""},{"Add":" Ok(())"},{"Add":" }"},{"Add":""},{"Add":" /// Create a complete identity, including writing to disk & exchanging key with origin."},{"Add":" ///"},{"Add":" /// # Arguments"},{"Add":" /// * `no_prompt` - If the user should not be prompted for input."},{"Add":" /// * `link_remote` - Override if the identity should be exchanged with the remote."},{"Add":" pub async fn create("},{"Add":" self,"},{"Add":" no_prompt: bool,"},{"Add":" link_remote: bool,"},{"Add":" ) -> Result {"},{"Add":" let confirmed_identity = if no_prompt {"},{"Add":" self"},{"Add":" } else {"},{"Add":" self.prompt_changes(false)?"},{"Add":" };"},{"Add":""},{"Add":" confirmed_identity.write(false)?;"},{"Add":""},{"Add":" // Only exchange keys with the server if the user agreed to do so"},{"Add":" if link_remote"},{"Add":" && confirmed_identity.link_remote"},{"Add":" && confirmed_identity"},{"Add":" .prove(*NO_CERT_CHECK.get_or_init(|| false))"},{"Add":" .await"},{"Add":" .is_err()"},{"Add":" {"},{"Add":" return Err(IdentityCreateError::ProveFailed("},{"Add":" confirmed_identity.name.clone(),"},{"Add":" ));"},{"Add":" }"},{"Add":""},{"Add":" // If the user has entered a password, add it to the keyring"},{"Add":" if let Some(password) = confirmed_identity.password.clone() {"},{"Add":" Entry::new(\"pijul\", &confirmed_identity.name)"},{"Add":" .set_password(&password)"},{"Add":" .context(\"Unable to write to keychain\")?;"},{"Add":" }"},{"Add":""},{"Add":" Ok(confirmed_identity)"},{"Add":" }"},{"Add":""},{"Add":" /// Replace an existing identity with a new one."},{"Add":" ///"},{"Add":" /// # Arguments"},{"Add":" /// * `new_identity` - The new identity that will be created"},{"Add":" pub fn replace_with(self, new_identity: Self) -> Result {"},{"Add":" // Remove the old data"},{"Add":" let old_identity_path = path(&self.name, true)?;"},{"Add":" debug!(\"Removing old directory: {old_identity_path:?}\");"},{"Add":" fs::remove_dir_all(old_identity_path).context(\"Could not remove old identity.\")?;"},{"Add":""},{"Add":" // Write the new data"},{"Add":" new_identity.write(true)?;"},{"Add":""},{"Add":" // Remove the old keychain entry if name has changed"},{"Add":" if self.name != new_identity.name {"},{"Add":" if let Err(e) = Entry::new(\"pijul\", &self.name).delete_password() {"},{"Add":" warn!(\"Unable to delete password: {e:?}\");"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" // Update the password"},{"Add":" if let Some(password) = new_identity.password.clone() {"},{"Add":" Entry::new(\"pijul\", &new_identity.name).set_password(&password)?;"},{"Add":" } else if let Err(e) = Entry::new(\"pijul\", &new_identity.name).delete_password() {"},{"Add":" warn!(\"Unable to delete password: {e:?}\");"},{"Add":" }"},{"Add":""},{"Add":" Ok(new_identity)"},{"Add":" }"},{"Add":"}"}]}},{"FileDel":{"deleted_names":[{"basename":"key.rs","metadata":64},{"basename":"key.rs","metadata":0}],"del":{"EdgeMap":{"edges":[{"previous":"BLOCK | FOLDER","flag":"BLOCK | FOLDER | DELETED","from":{"change":7,"pos":93386},"to":{"change":7,"start":200,"end":217},"introduced_by":7},{"previous":"BLOCK | FOLDER","flag":"BLOCK | FOLDER | DELETED","from":{"change":7,"pos":217},"to":{"change":7,"start":2558,"end":2558},"introduced_by":7},{"previous":"BLOCK | FOLDER | DELETED","flag":"BLOCK | FOLDER | DELETED","from":{"change":7,"pos":93386},"to":{"change":7,"start":2549,"end":2557},"introduced_by":7},{"previous":"BLOCK | FOLDER","flag":"BLOCK | FOLDER | DELETED","from":{"change":7,"pos":2557},"to":{"change":7,"start":2558,"end":2558},"introduced_by":7}],"inode":{"change":7,"pos":2558}}},"content_edges":{"edges":[{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2558},"to":{"change":7,"start":2559,"end":2581},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2581},"to":{"change":7,"start":22124,"end":22159},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":22159},"to":{"change":7,"start":2581,"end":2599},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2581},"to":{"change":7,"start":2581,"end":2599},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":6,"pos":174},"to":{"change":7,"start":2637,"end":2653},"introduced_by":6},{"previous":"","flag":"DELETED","from":{"change":7,"pos":935},"to":{"change":7,"start":2637,"end":2653},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2637},"to":{"change":7,"start":2637,"end":2653},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2653},"to":{"change":7,"start":22160,"end":22161},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":22161},"to":{"change":7,"start":2653,"end":2695},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2653},"to":{"change":7,"start":2653,"end":2695},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":961},"to":{"change":7,"start":2718,"end":2791},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2718},"to":{"change":7,"start":2718,"end":2791},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2791},"to":{"change":7,"start":2791,"end":2794},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":987},"to":{"change":7,"start":2817,"end":2839},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2817},"to":{"change":7,"start":2817,"end":2839},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":2628},"to":{"change":7,"start":2856,"end":2858},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2856},"to":{"change":7,"start":2856,"end":2858},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2858},"to":{"change":7,"start":2858,"end":2859},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2859},"to":{"change":7,"start":2859,"end":2956},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":2689},"to":{"change":7,"start":3003,"end":3064},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":22348},"to":{"change":7,"start":3003,"end":3064},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":3003},"to":{"change":7,"start":3003,"end":3064},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":2742},"to":{"change":7,"start":3064,"end":3372},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":3064},"to":{"change":7,"start":3064,"end":3372},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":3509},"to":{"change":7,"start":3509,"end":3874},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":3874},"to":{"change":7,"start":3874,"end":3875},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":22414},"to":{"change":7,"start":3943,"end":4058},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":3943},"to":{"change":7,"start":3943,"end":4058},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4059},"to":{"change":7,"start":4059,"end":4218},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":2744},"to":{"change":7,"start":4218,"end":4383},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4218},"to":{"change":7,"start":4218,"end":4383},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":3519},"to":{"change":7,"start":4459,"end":4532},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4459},"to":{"change":7,"start":4459,"end":4532},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":819},"to":{"change":7,"start":4555,"end":4565},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4555},"to":{"change":7,"start":4555,"end":4565},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4565},"to":{"change":7,"start":4565,"end":4586},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4586},"to":{"change":7,"start":4586,"end":4588},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4588},"to":{"change":7,"start":4588,"end":4602},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4602},"to":{"change":7,"start":4602,"end":4678},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4678},"to":{"change":7,"start":4678,"end":4879},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4879},"to":{"change":7,"start":4879,"end":4955},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4955},"to":{"change":7,"start":4955,"end":4989},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4532},"to":{"change":7,"start":22733,"end":23023},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":2,"pos":2804},"to":{"change":7,"start":23116,"end":23404},"introduced_by":2},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":23116},"to":{"change":7,"start":23116,"end":23404},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":3,"pos":1808},"to":{"change":7,"start":23476,"end":23576},"introduced_by":3},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":23476},"to":{"change":7,"start":23476,"end":23576},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":4,"pos":2492},"to":{"change":7,"start":23622,"end":23678},"introduced_by":4},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":23622},"to":{"change":7,"start":23622,"end":23678},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":5,"pos":176},"to":{"change":7,"start":688,"end":710},"introduced_by":5},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":688},"to":{"change":7,"start":688,"end":710},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":6,"pos":249},"to":{"change":7,"start":804,"end":818},"introduced_by":6},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":804},"to":{"change":7,"start":804,"end":818},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":710},"to":{"change":6,"start":175,"end":249},"introduced_by":6},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":23678},"to":{"change":5,"start":175,"end":176},"introduced_by":5},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":23576},"to":{"change":4,"start":2441,"end":2492},"introduced_by":4},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":23404},"to":{"change":3,"start":1580,"end":1808},"introduced_by":3},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":23023},"to":{"change":2,"start":2499,"end":2804},"introduced_by":2},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4383},"to":{"change":7,"start":2745,"end":2895},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2895},"to":{"change":7,"start":2895,"end":2896},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2896},"to":{"change":7,"start":2896,"end":3399},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":22450},"to":{"change":7,"start":3433,"end":3468},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":3433},"to":{"change":7,"start":3433,"end":3468},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":3468},"to":{"change":7,"start":22451,"end":22732},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":22732},"to":{"change":7,"start":3468,"end":3519},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":3468},"to":{"change":7,"start":3468,"end":3519},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":3399},"to":{"change":7,"start":22415,"end":22450},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":4218},"to":{"change":7,"start":2743,"end":2744},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":3875},"to":{"change":7,"start":22349,"end":22414},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":3064},"to":{"change":7,"start":2690,"end":2742},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2956},"to":{"change":7,"start":22287,"end":22348},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":420},"to":{"change":7,"start":2521,"end":2536},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2839},"to":{"change":7,"start":2521,"end":2536},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":430},"to":{"change":7,"start":2536,"end":2599},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2536},"to":{"change":7,"start":2536,"end":2599},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":7,"pos":22286},"to":{"change":7,"start":2621,"end":2628},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2621},"to":{"change":7,"start":2621,"end":2628},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2599},"to":{"change":7,"start":22162,"end":22192},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":5,"pos":174},"to":{"change":7,"start":22192,"end":22286},"introduced_by":5},{"previous":"","flag":"DELETED","from":{"change":7,"pos":674},"to":{"change":7,"start":22192,"end":22286},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":22192},"to":{"change":7,"start":22192,"end":22286},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":22192},"to":{"change":7,"start":431,"end":580},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":580},"to":{"change":5,"start":81,"end":174},"introduced_by":5},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2839},"to":{"change":7,"start":218,"end":289},"introduced_by":7},{"previous":"","flag":"DELETED","from":{"change":5,"pos":80},"to":{"change":7,"start":361,"end":420},"introduced_by":5},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":361},"to":{"change":7,"start":361,"end":420},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":289},"to":{"change":5,"start":9,"end":80},"introduced_by":5},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2794},"to":{"change":7,"start":962,"end":987},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2695},"to":{"change":7,"start":936,"end":961},"introduced_by":7},{"previous":"BLOCK","flag":"BLOCK | DELETED","from":{"change":7,"pos":2599},"to":{"change":6,"start":138,"end":174},"introduced_by":6}],"inode":{"change":7,"pos":2558}},"content":[{"Del":"use crate::config::*;\n"},{"Del":"use crate::repository::Repository;\n"},{"Del":"use anyhow::bail;\n"},{"Del":"use log::debug;\n"},{"Del":"\n"},{"Del":"use std::io::Write;\nuse std::path::Path;\n\n"},{"Del":"pub struct Key {\n #[clap(subcommand)]\n subcmd: Option,\n"},{"Del":"}\n\n"},{"Del":"pub enum SubCommand {\n"},{"Del":"}\n"},{"Del":"\n"},{"Del":"impl Key {\n pub async fn run(self) -> Result<(), anyhow::Error> {\n match self.subcmd {\n"},{"Del":" if let Some(mut dir) = global_config_dir() {\n"},{"Del":" dir.push(\"secretkey.json\");\n if std::fs::metadata(&dir).is_ok() {\n bail!(\"Cannot overwrite key file {:?}\", dir)\n }\n debug!(\"creating file {:?}\", dir);\n let mut f = open_secret_file(&dir)?;\n"},{"Del":" let pass = rpassword::read_password_from_tty(Some(\n \"Password for the new key (press enter to leave it unencrypted): \",\n ))?;\n let pass = if pass.is_empty() {\n None\n } else {\n Some(pass.as_ref())\n };\n"},{"Del":"\n"},{"Del":" serde_json::to_writer_pretty(&mut f, &k.save(pass))?;\n f.write_all(b\"\\n\")?;\n"},{"Del":" let mut stderr = std::io::stderr();\n writeln!(stderr, \"Wrote secret key in {:?}\", dir)?;\n dir.pop();\n"},{"Del":" dir.push(\"publickey.json\");\n debug!(\"creating file {:?}\", dir);\n let mut f = std::fs::File::create(&dir)?;\n"},{"Del":" f.write_all(b\"\\n\")?;\n }\n }\n"},{"Del":" }\n"},{"Del":" Ok(())\n }\n"},{"Del":"}\n"},{"Del":"\n#[cfg(unix)]\n"},{"Del":"fn open_secret_file(path: &Path) -> Result {\n"},{"Del":" use std::fs::OpenOptions;\n use std::os::unix::fs::OpenOptionsExt;\n OpenOptions::new()\n .write(true)\n .create(true)\n .mode(0o600)\n .open(path)\n}\n\n#[cfg(not(unix))]\n"},{"Del":"fn open_secret_file(path: &Path) -> Result {\n"},{"Del":" std::fs::File::create(path)\n}\n"},{"Del":" Some(SubCommand::Prove {\n remote,\n no_cert_check,\n }) => {\n let mut remote = if let Ok(repo) = Repository::find_root(None) {\n use crate::remote::*;\n if let RemoteRepo::Ssh(ssh) = repo\n"},{"Del":" .await?\n {\n ssh\n } else {\n bail!(\"No such remote: {}\", remote)\n }\n } else if let Some(mut ssh) = crate::remote::ssh::ssh_remote(&remote, false) {\n"},{"Del":" } else {\n bail!(\"No such remote: {}\", remote)\n };\n"},{"Del":" remote.prove(key).await?;\n }\n"},{"Del":" None => {\n"},{"Del":" }\n"},{"Del":" Self::command().write_long_help(&mut std::io::stdout())?;\n"},{"Del":"\n"},{"Del":" let (_, key) = super::load_key()?;\n"},{"Del":" if let Some(c) = ssh.connect(&remote, crate::DEFAULT_CHANNEL).await? {\n c\n } else {\n bail!(\"No such remote: {}\", remote)\n }\n"},{"Del":" .remote(\n None,\n &remote,\n crate::DEFAULT_CHANNEL,\n Direction::Pull,\n no_cert_check,\n false,\n )\n"},{"Del":" let pk = k.public_key();\n serde_json::to_writer_pretty(&mut f, &pk)?;\n f.write_all(b\"\\n\")?;\n"},{"Del":"\n"},{"Del":" dir.pop();\n dir.push(\"identities\");\n std::fs::create_dir_all(&dir)?;\n dir.push(&pk.key);\n debug!(\"creating file {:?}\", dir);\n let mut f = std::fs::File::create(&dir)?;\n serde_json::to_writer_pretty(\n &mut f,\n &super::Identity {\n public_key: pk,\n origin: String::new(),\n"},{"Del":" email,\n"},{"Del":" name: None,\n last_modified: std::time::SystemTime::now()\n .duration_since(std::time::SystemTime::UNIX_EPOCH)\n .unwrap()\n .as_secs(),\n"},{"Del":" },\n )?;\n"},{"Del":" login,\n"},{"Del":"\n"},{"Del":" let k = libpijul::key::SKey::generate(None);\n"},{"Del":" std::fs::create_dir_all(&dir)?;\n"},{"Del":" Some(SubCommand::Generate { email, login }) => {\n"},{"Del":" Generate {\n"},{"Del":" #[clap(long = \"email\")]\n email: Option,\n"},{"Del":" },\n"},{"Del":" login: String,\n },\n"},{"Del":" Prove {\n #[clap(short = 'k')]\n no_cert_check: bool,\n remote: String,\n"},{"Del":" /// Associate a generated key with a remote identity. Patches authored\n /// by unproven keys will only display the key as the author. Example\n"},{"Del":" /// of proving a key (after generating one): `pijul key prove @ssh.pijul.com`\n"},{"Del":" /// Generate a new key. The name used for a key is not required to\n"},{"Del":" /// are stored in your global configuration directory.\n"},{"Del":" /// match a user's remote or SSH credentials. By default, new keys\n"},{"Del":"#[derive(Parser, Debug)]\n"},{"Del":"#[derive(Parser, Debug)]\n"},{"Del":"use clap::{CommandFactory, Parser};\n"}]}},{"FileAdd":{"meta":{"basename":"identity.rs","metadata":0},"context":[{"change":7,"pos":93386}],"contents":[{"Add":"use crate::{"},{"Add":" config,"},{"Add":" identity::{choose_identity_name, fix_identities, Complete},"},{"Add":" Identity,"},{"Add":"};"},{"Add":""},{"Add":"use std::{convert::TryInto, io::Write};"},{"Add":""},{"Add":"use anyhow::bail;"},{"Add":"use chrono::{DateTime, NaiveDateTime, Utc};"},{"Add":"use clap::Parser;"},{"Add":"use dialoguer::Confirm;"},{"Add":"use keyring::Entry;"},{"Add":"use ptree::{print_tree, TreeBuilder};"},{"Add":""},{"Add":"mod subcmd {"},{"Add":" use anyhow::bail;"},{"Add":" use chrono::{DateTime, Utc};"},{"Add":" use clap::{ArgGroup, Parser};"},{"Add":""},{"Add":" fn validate_email(input: &str) -> Result {"},{"Add":" if validator::validate_email(input) {"},{"Add":" Ok(input.to_string())"},{"Add":" } else {"},{"Add":" bail!(\"Invalid email address\");"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn valid_name(input: &str) -> Result<(), anyhow::Error> {"},{"Add":" if input.is_empty() {"},{"Add":" bail!(\"Name is empty\");"},{"Add":" } else {"},{"Add":" Ok(())"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn name_does_not_exist(input: &str) -> Result {"},{"Add":" valid_name(&input)?;"},{"Add":""},{"Add":" if crate::identity::Complete::load(input).is_ok() {"},{"Add":" bail!(\"Name already exists\")"},{"Add":" } else {"},{"Add":" Ok(input.to_string())"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn name_exists(input: &str) -> Result {"},{"Add":" valid_name(&input)?;"},{"Add":""},{"Add":" if crate::identity::Complete::load(input).is_err() {"},{"Add":" bail!(\"Name does not exist\");"},{"Add":" } else {"},{"Add":" Ok(input.to_string())"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" fn parse_expiry(input: &str) -> Result, anyhow::Error> {"},{"Add":" let parsed_date = dateparser::parse_with_timezone(input, &chrono::offset::Utc);"},{"Add":" if parsed_date.is_err() {"},{"Add":" bail!(\"Invalid date\");"},{"Add":" }"},{"Add":""},{"Add":" let date = parsed_date.unwrap();"},{"Add":" if chrono::offset::Utc::now().timestamp_millis() > date.timestamp_millis() {"},{"Add":" bail!(\"Date is in the past\")"},{"Add":" } else {"},{"Add":" Ok(date)"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" #[derive(Clone, Parser, Debug)]"},{"Add":" #[clap(group("},{"Add":" ArgGroup::new(\"edit-data\")"},{"Add":" .multiple(true)"},{"Add":" .requires(\"no-prompt\")"},{"Add":" .args(&[\"display-name\", \"email\", \"expiry\", \"username\", \"remote\", \"name\"]),"},{"Add":" ))]"},{"Add":" pub struct New {"},{"Add":" /// Do not automatically link keys with the remote"},{"Add":" #[clap(long = \"no-link\", display_order = 1)]"},{"Add":" pub no_link: bool,"},{"Add":" /// Abort rather than prompt for input"},{"Add":" #[clap(long = \"no-prompt\", requires(\"edit-data\"), display_order = 1)]"},{"Add":" pub no_prompt: bool,"},{"Add":" /// Set the username"},{"Add":" #[clap(long = \"username\", display_order = 3)]"},{"Add":" pub username: Option,"},{"Add":" /// Set the default remote"},{"Add":" #[clap(long = \"remote\", display_order = 3)]"},{"Add":" pub remote: Option,"},{"Add":" /// Set the display name"},{"Add":" #[clap(long = \"display-name\", display_order = 3)]"},{"Add":" pub display_name: Option,"},{"Add":" /// Set the email"},{"Add":" #[clap(long = \"email\", value_parser = validate_email, display_order = 3)]"},{"Add":" pub email: Option,"},{"Add":" /// Set the new identity name"},{"Add":" #[clap(long = \"name\", value_parser = name_does_not_exist, display_order = 3)]"},{"Add":" pub name: Option,"},{"Add":" /// Set the expiry"},{"Add":" #[clap(long = \"expiry\", value_parser = parse_expiry, display_order = 3)]"},{"Add":" pub expiry: Option>,"},{"Add":" /// Encrypt using a password from standard input"},{"Add":" #[clap(long = \"read-password\", display_order = 2)]"},{"Add":" pub password: bool,"},{"Add":" }"},{"Add":""},{"Add":" #[derive(Clone, Parser, Debug)]"},{"Add":" #[clap(group("},{"Add":" ArgGroup::new(\"edit-data\")"},{"Add":" .multiple(true)"},{"Add":" .requires(\"no-prompt\")"},{"Add":" .args(&[\"display-name\", \"email\", \"new-name\", \"expiry\", \"username\", \"remote\"]),"},{"Add":" ))]"},{"Add":" pub struct Edit {"},{"Add":" /// Set the name of the identity to edit"},{"Add":" #[clap(long = \"name\", group(\"name\"), value_parser = name_exists, display_order = 2)]"},{"Add":" pub old_name: Option,"},{"Add":" /// Do not automatically link keys with the remote"},{"Add":" #[clap(long = \"no-link\", display_order = 1)]"},{"Add":" pub no_link: bool,"},{"Add":" /// Abort rather than prompt for input"},{"Add":" #[clap("},{"Add":" long = \"no-prompt\","},{"Add":" requires(\"name\"),"},{"Add":" requires(\"edit-data\"),"},{"Add":" display_order = 1"},{"Add":" )]"},{"Add":" pub no_prompt: bool,"},{"Add":" /// Set the username"},{"Add":" #[clap(long = \"username\", display_order = 3)]"},{"Add":" pub username: Option,"},{"Add":" /// Set the default remote"},{"Add":" #[clap(long = \"remote\", display_order = 3)]"},{"Add":" pub remote: Option,"},{"Add":" /// Set the display name"},{"Add":" #[clap(long = \"display-name\", display_order = 3)]"},{"Add":" pub display_name: Option,"},{"Add":" /// Set the email"},{"Add":" #[clap(long = \"email\", value_parser = validate_email, display_order = 3)]"},{"Add":" pub email: Option,"},{"Add":" /// Set the identity name"},{"Add":" #[clap(long = \"new-name\", display_order = 3)]"},{"Add":" pub new_name: Option,"},{"Add":" /// Set the expiry"},{"Add":" #[clap(long = \"expiry\", value_parser = parse_expiry, display_order = 3)]"},{"Add":" pub expiry: Option>,"},{"Add":" /// Encrypt using a password from standard input"},{"Add":" #[clap(long = \"read-password\", display_order = 2)]"},{"Add":" pub password: bool,"},{"Add":" }"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Clone, Parser, Debug)]"},{"Add":"pub enum SubCommand {"},{"Add":" /// Create a new identity"},{"Add":" New(subcmd::New),"},{"Add":" /// Repair the identity state on disk, including migration from older versions of Pijul"},{"Add":" Repair {"},{"Add":" /// Abort rather than prompt for input"},{"Add":" #[clap(long = \"no-prompt\")]"},{"Add":" no_prompt: bool,"},{"Add":" },"},{"Add":" /// Prove an identity to the server"},{"Add":" Prove {"},{"Add":" /// Set the name used to prove the identity"},{"Add":" #[clap(long = \"name\")]"},{"Add":" identity_name: Option,"},{"Add":" /// Abort rather than prompt for input"},{"Add":" #[clap(long = \"no-prompt\")]"},{"Add":" no_prompt: bool,"},{"Add":" },"},{"Add":" /// Pretty-print all valid identities on disk"},{"Add":" List,"},{"Add":" /// Edit an existing identity"},{"Add":" Edit(subcmd::Edit),"},{"Add":" /// Remove an existing identity"},{"Add":" Remove {"},{"Add":" /// Set the name of the identity to remove"},{"Add":" #[clap(long = \"name\")]"},{"Add":" identity_name: Option,"},{"Add":" /// Remove the matching identity without confirmation"},{"Add":" #[clap(long = \"no-confirm\")]"},{"Add":" no_confirm: bool,"},{"Add":" },"},{"Add":"}"},{"Add":""},{"Add":"#[derive(Clone, Parser, Debug)]"},{"Add":"pub struct IdentityCommand {"},{"Add":" #[clap(subcommand)]"},{"Add":" subcmd: SubCommand,"},{"Add":" /// Do not verify certificates (use with caution)"},{"Add":" #[clap(long = \"no-cert-check\", short = 'k')]"},{"Add":" no_cert_check: bool,"},{"Add":"}"},{"Add":""},{"Add":"fn unwrap_args("},{"Add":" default: Complete,"},{"Add":" identity_name: Option,"},{"Add":" login: Option,"},{"Add":" display_name: Option,"},{"Add":" origin: Option,"},{"Add":" email: Option,"},{"Add":" expiry: Option>,"},{"Add":" password: bool,"},{"Add":") -> Result {"},{"Add":" let pw = if password {"},{"Add":" Some("},{"Add":" dialoguer::Password::with_theme(config::load_theme()?.as_ref())"},{"Add":" .with_prompt(\"Secret key password\")"},{"Add":" .with_confirmation(\"Confirm password\", \"Password mismatch\")"},{"Add":" .interact()?,"},{"Add":" )"},{"Add":" } else {"},{"Add":" None"},{"Add":" };"},{"Add":""},{"Add":" let secret_key = libpijul::key::SKey::generate(expiry);"},{"Add":""},{"Add":" Ok(Complete {"},{"Add":" name: identity_name.unwrap_or(default.name),"},{"Add":" password: pw.clone(),"},{"Add":" secret_key: secret_key.save(pw.as_deref()),"},{"Add":" identity: Identity {"},{"Add":" login: login.unwrap_or(default.identity.login),"},{"Add":" name: display_name.or(default.identity.name),"},{"Add":" origin: origin.unwrap_or(default.identity.origin),"},{"Add":" email: email.or(default.identity.email),"},{"Add":" last_modified: default.identity.last_modified,"},{"Add":" public_key: secret_key.public_key(),"},{"Add":" },"},{"Add":" link_remote: true,"},{"Add":" })"},{"Add":"}"},{"Add":""},{"Add":"impl IdentityCommand {"},{"Add":" pub async fn run(self) -> Result<(), anyhow::Error> {"},{"Add":" let mut stderr = std::io::stderr();"},{"Add":" crate::identity::NO_CERT_CHECK"},{"Add":" .set(self.no_cert_check)"},{"Add":" .unwrap();"},{"Add":""},{"Add":" match self.subcmd {"},{"Add":" SubCommand::New(options) => {"},{"Add":" let identity = if options.no_prompt {"},{"Add":" unwrap_args("},{"Add":" Complete::default()?,"},{"Add":" options.name,"},{"Add":" options.username,"},{"Add":" options.display_name,"},{"Add":" options.remote,"},{"Add":" options.email,"},{"Add":" options.expiry,"},{"Add":" options.password,"},{"Add":" )?"},{"Add":" } else {"},{"Add":" Complete::default()?"},{"Add":" };"},{"Add":""},{"Add":" identity.create(options.no_prompt, !options.no_link).await?;"},{"Add":" }"},{"Add":" SubCommand::Repair { no_prompt } => fix_identities(no_prompt).await?,"},{"Add":" SubCommand::Prove {"},{"Add":" identity_name,"},{"Add":" no_prompt,"},{"Add":" } => {"},{"Add":" Complete::load(&identity_name.unwrap_or(choose_identity_name(no_prompt).await?))?"},{"Add":" .prove(self.no_cert_check)"},{"Add":" .await?;"},{"Add":" }"},{"Add":" SubCommand::List => {"},{"Add":" let identities = Complete::load_all()?;"},{"Add":""},{"Add":" if identities.is_empty() {"},{"Add":" let mut stderr = std::io::stderr();"},{"Add":" writeln!("},{"Add":" stderr,"},{"Add":" \"No identities found. Use `pijul identity new` to create one.\""},{"Add":" )?;"},{"Add":" writeln!(stderr, \"If you have created a key in the past, you may need to migrate via `pijul identity repair`\")?;"},{"Add":""},{"Add":" return Ok(());"},{"Add":" }"},{"Add":""},{"Add":" let mut tree = TreeBuilder::new(\"Identities\".to_string());"},{"Add":" for identity in identities {"},{"Add":" tree.begin_child(identity.name.clone());"},{"Add":""},{"Add":" tree.add_empty_child(format!("},{"Add":" \"Name: {}\","},{"Add":" identity"},{"Add":" .identity"},{"Add":" .name"},{"Add":" .unwrap_or_else(|| \"\".to_string())"},{"Add":" ));"},{"Add":" tree.add_empty_child(format!("},{"Add":" \"Email: {}\","},{"Add":" identity"},{"Add":" .identity"},{"Add":" .email"},{"Add":" .unwrap_or_else(|| \"\".to_string())"},{"Add":" ));"},{"Add":""},{"Add":" let login = if identity.identity.login.is_empty() {"},{"Add":" String::from(\"\")"},{"Add":" } else {"},{"Add":" identity.identity.login"},{"Add":" };"},{"Add":""},{"Add":" let origin = if identity.identity.origin.is_empty() {"},{"Add":" String::from(\"\")"},{"Add":" } else {"},{"Add":" identity.identity.origin"},{"Add":" };"},{"Add":" tree.add_empty_child(format!(\"Login: {login}@{origin}\"));"},{"Add":""},{"Add":" tree.begin_child(\"Public key\".to_string());"},{"Add":" tree.add_empty_child(format!(\"Key: {}\", identity.identity.public_key.key));"},{"Add":" tree.add_empty_child(format!("},{"Add":" \"Version: {}\","},{"Add":" identity.identity.public_key.version"},{"Add":" ));"},{"Add":" tree.add_empty_child(format!("},{"Add":" \"Algorithm: {:#?}\","},{"Add":" identity.identity.public_key.algorithm"},{"Add":" ));"},{"Add":" tree.add_empty_child(format!("},{"Add":" \"Expiry: {}\","},{"Add":" identity"},{"Add":" .identity"},{"Add":" .public_key"},{"Add":" .expires"},{"Add":" .map(|date| date.format(\"%Y-%m-%d %H:%M:%S (UTC)\").to_string())"},{"Add":" .unwrap_or_else(|| \"Never\".to_string())"},{"Add":" ));"},{"Add":" tree.end_child();"},{"Add":""},{"Add":" tree.begin_child(\"Secret key\".to_string());"},{"Add":" tree.add_empty_child(format!(\"Version: {}\", identity.secret_key.version));"},{"Add":" tree.add_empty_child(format!("},{"Add":" \"Algorithm: {:#?}\","},{"Add":" identity.secret_key.algorithm"},{"Add":" ));"},{"Add":""},{"Add":" let encryption_message ="},{"Add":" if let Some(encryption) = identity.secret_key.encryption {"},{"Add":" format!("},{"Add":" \"{} (Stored in keyring: {})\","},{"Add":" match encryption {"},{"Add":" libpijul::key::Encryption::Aes128(_) => \"AES 128-bit\","},{"Add":" },"},{"Add":" keyring::Entry::new(\"pijul\", &identity.name)"},{"Add":" .get_password()"},{"Add":" .is_ok()"},{"Add":" )"},{"Add":" } else {"},{"Add":" String::from(\"None\")"},{"Add":" };"},{"Add":""},{"Add":" tree.add_empty_child(format!(\"Encryption: {encryption_message}\"));"},{"Add":" tree.end_child();"},{"Add":""},{"Add":" let naive_time = NaiveDateTime::from_timestamp("},{"Add":" identity.identity.last_modified.try_into()?,"},{"Add":" 0,"},{"Add":" );"},{"Add":" let date: DateTime = DateTime::from_utc(naive_time, Utc);"},{"Add":" tree.add_empty_child(format!("},{"Add":" \"Last updated: {}\","},{"Add":" date.format(\"%Y-%m-%d %H:%M:%S (UTC)\")"},{"Add":" ));"},{"Add":" tree.end_child();"},{"Add":" }"},{"Add":""},{"Add":" print_tree(&tree.build())?;"},{"Add":" }"},{"Add":" SubCommand::Edit(options) => {"},{"Add":" let old_id_name = if let Some(id_name) = options.old_name {"},{"Add":" id_name"},{"Add":" } else {"},{"Add":" choose_identity_name(options.no_prompt).await?"},{"Add":" };"},{"Add":""},{"Add":" let old_identity = Complete::load(&old_id_name)?;"},{"Add":""},{"Add":" let new_identity = if options.no_prompt {"},{"Add":" unwrap_args("},{"Add":" old_identity.clone(),"},{"Add":" options.new_name,"},{"Add":" options.username,"},{"Add":" options.display_name,"},{"Add":" options.remote,"},{"Add":" options.email,"},{"Add":" options.expiry,"},{"Add":" options.password,"},{"Add":" )?"},{"Add":" } else {"},{"Add":" old_identity.clone().prompt_changes(true)?"},{"Add":" };"},{"Add":""},{"Add":" old_identity.clone().replace_with(new_identity.clone())?;"},{"Add":""},{"Add":" // User has changed credentials, so attempt to re-prove"},{"Add":" if old_identity.identity.login != new_identity.identity.login"},{"Add":" || old_identity.identity.origin != new_identity.identity.origin"},{"Add":" {"},{"Add":" if !options.no_link && new_identity.link_remote {"},{"Add":" new_identity.prove(self.no_cert_check).await?;"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":" SubCommand::Remove {"},{"Add":" identity_name,"},{"Add":" no_confirm: no_prompt,"},{"Add":" } => {"},{"Add":" let identity = Complete::load("},{"Add":" &identity_name.unwrap_or(choose_identity_name(no_prompt).await?),"},{"Add":" )?;"},{"Add":" let path = config::global_config_dir()"},{"Add":" .unwrap()"},{"Add":" .join(\"identities\")"},{"Add":" .join(&identity.name);"},{"Add":""},{"Add":" writeln!(stderr, \"Removing identity: {identity} at {path:?}\")?;"},{"Add":""},{"Add":" // Ask the user to confirm"},{"Add":" if !no_prompt"},{"Add":" && !Confirm::with_theme(config::load_theme()?.as_ref())"},{"Add":" .with_prompt(\"Do you wish to continue?\")"},{"Add":" .default(false)"},{"Add":" .interact()?"},{"Add":" {"},{"Add":" bail!(\"User did not wish to continue\");"},{"Add":" }"},{"Add":""},{"Add":" // The user has confirmed, safe to continue"},{"Add":" std::fs::remove_dir_all(path)?;"},{"Add":" writeln!(stderr, \"Identity removed.\")?;"},{"Add":""},{"Add":" if identity.secret_key.encryption.is_some() {"},{"Add":" Entry::new(\"pijul\", &identity.name).delete_password()?;"},{"Add":" }"},{"Add":" }"},{"Add":" }"},{"Add":""},{"Add":" Ok(())"},{"Add":" }"},{"Add":"}"}]}}],"owner":"irevoire","repo":"pijul","token":"rl2zPlQbU//iY6I27jFLm5PPVa0iEW8mL8UhwsQI/ns=","login":null}

…

Dependencies

Change contents