matrix-org / matrix-org/python-signedjson
Don't expect monkeypatched nacl.signing.SigningKey instances
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- Python
- Stars
- 13
- Forks
- 10
- PR merge metrics
- No merged PRs in 30d
Description
A nicer way to fix matrix-org/synapse#11714 (imo)
- Define a new type which holds the data
(key: nacl.signing.SigningKey, alg: str, version: str). Either inherit fromnacl.signing.SigningKeyor introduce a new wrapper. - Change functions that take a
signedjson.types.SigningKeyto accept this new data type. - Major version bump.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the functions that accept signedjson.types.SigningKey and review matrix-org/synapse#11714 for the monkeypatching problem. Define the proposed key data type, update those function boundaries, and verify the major-version API change is consistently represented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- cryptography, security
- Issue type
- Refactor
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100