nextcloud / lookup-server

:eyes: Lookup server to find remote users for federated sharing
23 stars 16 forks source link

Enhance the user handling logic to accept unsigned user upsert/delete operations for troubleshooting and testing #73

Open pmarini-nc opened 2 years ago

pmarini-nc commented 2 years ago

In the following scenarios:

it makes sense to test the lookup server by calling the REST API from a command line client, such as curl.

However, it seems that it is not possible without signing the request (meaning that there should exist a Nextcloud instance with a domain matching the one specified in field federationId).

It would be good then to introduce an operating mode that doesn't check the signature, to be enabled during troubleshooting. For example a configuration switch in config.php?


Maybe @schiessle you can have a look?