Remote setup: spectra init --owner KEYID and the owner's claim from the client issue #22 closed: completed andymccall opened this · 0 comments
andymccall set labels feature, security ·
andymccall set milestone Sprint 2 ·
andymccall referenced by change 77df591d5a2f on main ·
andymccall closed ·
Spec §8.6 "Remote setup".
spectra init --owner KEYIDon the server: instance key and ledger without the owner's secret key; the ledger starts withidentity.instance./api/v1/instanceonly and refuses the rest with "this Spectra has no owner yet".spectra connectsendsidentity.owner, signed over its payload, when the server has no owner; accepted only from the key--ownernamed.Principals,verifyandrebuildaccept an owner recorded after the instance.Done when: a test sets a server up with
--owner, is refused before the claim, refuses a claim by another key, accepts the owner's, and verifies.