Skip to content

feat(nomad profiles): nomad profiles URL parsing and signature verification (WPB-23837)#4627

Open
marcoconti83 wants to merge 2 commits intomarco/nomad-profilesfrom
feat/nomad-profile-build-flag
Open

feat(nomad profiles): nomad profiles URL parsing and signature verification (WPB-23837)#4627
marcoconti83 wants to merge 2 commits intomarco/nomad-profilesfrom
feat/nomad-profile-build-flag

Conversation

@marcoconti83
Copy link
Member

@marcoconti83 marcoconti83 commented Mar 6, 2026

https://wearezeta.atlassian.net/browse/WPB-23837

What's new in this PR?

When starting an autologin intent, the app also parses an optional nomad profiles service host. The paramater is expected to be signed, i.e. there should be a signature passed to the intent.

The app will check that the parameter signatures one of the public keys hardcoded in the application. If it doesn't, it rejects it.

WARNING: This PR targets the marco/nomad-profiles branch because it should be merged AFTER that one.

@marcoconti83 marcoconti83 changed the title feat(nomad profiles): nomad profiles URL parsing and signature verifi… feat(nomad profiles): nomad profiles URL parsing and signature verification (WPB-23837) Mar 6, 2026
@marcoconti83 marcoconti83 force-pushed the marco/nomad-profiles branch from ea421d0 to 065d230 Compare March 6, 2026 12:13
@marcoconti83 marcoconti83 force-pushed the feat/nomad-profile-build-flag branch 2 times, most recently from 5a4f6c4 to f57f2fa Compare March 6, 2026 13:46
@marcoconti83 marcoconti83 force-pushed the marco/nomad-profiles branch from 065d230 to a24639c Compare March 6, 2026 13:55
@marcoconti83 marcoconti83 force-pushed the feat/nomad-profile-build-flag branch from f57f2fa to c344664 Compare March 6, 2026 13:58
@marcoconti83 marcoconti83 force-pushed the marco/nomad-profiles branch from a24639c to efca5fd Compare March 6, 2026 15:03
@marcoconti83 marcoconti83 force-pushed the feat/nomad-profile-build-flag branch from c344664 to b5c90e0 Compare March 6, 2026 15:06
@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 6, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant