mirror of
https://github.com/getAlby/hub.git
synced 2026-08-13 12:33:39 +02:00
edd283cdb2
* fix: update encryption scheme for node migration files Migration files are now encrypted with AES-CTR using a key derived via Argon2 with a 32-byte salt, the same derivation used for encrypted configuration values. Files created by earlier versions can still be restored: the restore path detects the scheme by trial-decrypting the archive header and checking for the ZIP file signature, which also rejects an incorrect unlock password up front instead of extracting garbage. The migration screen now also tells users to never share their migration file with anyone. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix: reword migration file warning Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix: read full migration file header before detecting cipher scheme io.ReadAtLeast can return once the smallest scheme's header is read, which truncates the larger current-scheme header when the reader delivers short reads (e.g. a network request body). Read the full header and only tolerate a short read that still covers the smallest scheme. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix: extract migration files to a staging directory during restore If extraction failed partway through, the partially populated restore directory was left in the working directory, and the next startup would apply the incomplete restore. Extract to a staging directory and only move it into place after every entry has been extracted successfully. Also reject archives that contain no files. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix: assert traversal-specific error in restore backup test Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| api.go | ||
| api_test.go | ||
| apps_test.go | ||
| backup.go | ||
| backup_test.go | ||
| esplora.go | ||
| lsp.go | ||
| models.go | ||
| rebalance.go | ||
| setup_test.go | ||
| transactions.go | ||
| transactions_test.go | ||