apache / incubator-milagro-dta

Apache Milagro Decentralized Trust Authority
https://milagro.apache.org/
Apache License 2.0
11 stars 8 forks source link

CreateIdentity() should only be run once #40

Closed howardkitto closed 4 years ago

howardkitto commented 4 years ago

A DTA should only store its own identity secrets. We should remove the public endpoint for creating Identities.

The logic for creating identities should be something like this...

  1. When the daemon starts up check if the config has an identity AND the secret keys are present (If there is an identity in config but no secret keys in the local store then they will have to be restored from back up)
  2. If there is no id in config (e.g. the DTA is running for the first time) then run createIdentity()