Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Invites shouldn't use project public key, but instead project invite ID #559

Open
EvanHahn opened this issue Apr 11, 2024 · 0 comments · May be fixed by #571
Open

Invites shouldn't use project public key, but instead project invite ID #559

EvanHahn opened this issue Apr 11, 2024 · 0 comments · May be fixed by #571
Assignees
@EvanHahn
Labels
mvp Requirement for MVP

Comments

@EvanHahn
Copy link
Contributor

No description provided.

@EvanHahn EvanHahn self-assigned this Apr 11, 2024
@EvanHahn EvanHahn added the mvp Requirement for MVP label Apr 11, 2024
EvanHahn added a commit that referenced this issue Apr 16, 2024
@EvanHahn
chore: invites should use special invite ID, not project public key
8c58d79 
A sophisticated bad actor who knows a project's public ID could spam
invites to determine whether someone was in a project.

Now, they need the harder-to-get "project invite ID", which is a
separate generated value.

Closes [#559].

[#559]: #559
@EvanHahn EvanHahn linked a pull request Apr 16, 2024 that will close this issue
Open
EvanHahn added a commit that referenced this issue May 20, 2024
@EvanHahn
chore: invites should use special invite ID, not project public key
1a0abad 
A sophisticated bad actor who knows a project's public ID could spam
invites to determine whether someone was in a project.

Now, they need the harder-to-get "project invite ID", which is a
separate generated value.

Closes [#559].

[#559]: #559
EvanHahn added a commit that referenced this issue May 30, 2024
@EvanHahn
chore: invites should use special invite ID, not project public key
dd18fea 
A sophisticated bad actor who knows a project's public ID could spam
invites to determine whether someone was in a project.

Now, they need the harder-to-get "project invite ID", which is a
separate generated value.

Closes [#559].

[#559]: #559
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@EvanHahn EvanHahn

Labels
mvp Requirement for MVP
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

chore: invites should use special invite ID, not project public key digidem/mapeo-core-next
1 participant
@EvanHahn