search

WebOfTrust / keria

KERI Agent in the cloud
https://keria.readthedocs.io/en/latest/
Apache License 2.0
16 stars 26 forks source link

Provide support for passcode rotation #222

Open lenkan opened 3 months ago

lenkan commented 3 months ago

As a user of a Keria Cloud Wallet, I need to be able to rotate my passcode so that I can change the passcode if there is a risk that my passcode has been compromised.

Currently, there is no documented way to do this as far as I can see. There as been a discussion on the community discord a while back: https://discord.com/channels/1148629222647148624/1148734044545228831/1164288912500461729

There is a function in signify-ts (https://github.com/WebOfTrust/signify-ts/blob/development/src/keri/app/clienting.ts#L360) named rotate that accepts a new passcode. However, it triggers Internal Server Error in KERIA when called. Also a bit unclear what needs to be provided in the second parameter if the intention is to rotate a passcode.

In kli from keripy, we have the kli passcode set command that supports passcode rotation: https://github.com/WebOfTrust/keripy/blob/0c94c462a44c46f97a6c5d7e683fb9bf821154ba/src/keri/app/cli/commands/passcode/set.py

rodolfomiranda commented 3 months ago

the feature was there initially, but probably is broken now. There were a couple of scripts in Signifypy that test passcode rotation and passcode rotation 1000 times. The thing with passcode rotation is that you need to regenerate and submit all new encrypted keys, that probably what should go in the second parameter.

2byrds commented 2 months ago

From our keri dev meeting: Code is there but some integration testing and fixes are needed. Signify-ts has the call but KERIA gives a 500.

2byrds commented 3 weeks ago

I have fixed this issue as part of a wave of SIGNIFY-TS testing and fixes related to multisig-vlei-issuance fixes that will include multisig delegation fixes as well https://github.com/WebOfTrust/keria/issues/249. We are approaching a new Keripy/KERIA release (per the dev discussion today)