Pandora-IsoMemo / TraceR

An app to generate a visual representation of a relational map
https://pandora-isomemo.github.io/TraceR/
GNU General Public License v3.0
0 stars 0 forks source link

Download a json with signature #20

Closed arunge closed 3 weeks ago

arunge commented 4 months ago

This is the first part of https://github.com/Pandora-IsoMemo/TraceR/issues/14#issue-2359921686

IMPORTANT: Signing a file will be possible only in the online version of the app!

In the online version during "Export with signature":

  • the current userID (comming from the login handled via shinyproxy) must be saved and added to the .json file
  • the content of the .json will be signed using openssl::rsa_keygen(), compare https://github.com/Pandora-IsoMemo/TraceR/pull/10/files
    • before hosting the app we will generate private and public keys that will only live on our shinyproxy server (and in a tool for storing passwords/credentials...)
    • when the app is running online, we can create a signature (openssl::signature_create()) using our private key (via an environment variable) for our file to be exported
    • export of the file containing the signature

@f-lukas as discussed, please

f-lukas commented 3 weeks ago

I am closing here as the signed download is now available in the beta app.