Files
f7_talk/lib/Migration/RegenerateSignalingKeys.php
T
glb_adm 01acfa3b40
Type checking / changes (push) Has been cancelled
Type checking / test (push) Has been cancelled
Type checking / typescript-summary (push) Has been cancelled
Node tests / changes (push) Has been cancelled
Node tests / test (push) Has been cancelled
Node tests / test-summary (push) Has been cancelled
UPSTREAM BASELINE: nextcloud/spreed v22.0.12 (без изменений)
Источник: https://github.com/nextcloud/spreed/archive/refs/tags/v22.0.12.tar.gz
С этого коммита ветка официального Nextcloud Talk отрезана (решение владельца 2026-07-06).
Все дальнейшие изменения — только наши; версии релизов: 22.0.12-f7.N.
2026-07-06 14:07:50 +00:00

49 lines
1.3 KiB
PHP

<?php
declare(strict_types=1);
/**
* SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors
* SPDX-License-Identifier: AGPL-3.0-or-later
*/
namespace OCA\Talk\Migration;
use OCA\Talk\Config;
use OCP\AppFramework\Services\IAppConfig;
use OCP\Migration\IOutput;
use OCP\Migration\IRepairStep;
/**
* In JWT 7.0.2 validation for the key length was added, and it revealed that
* Talk used a too short private key. So when generating a signaling ticket fails,
* we generate a new private and public key with more complex curve which fixes it.
*/
class RegenerateSignalingKeys implements IRepairStep {
public function __construct(
protected IAppConfig $appConfig,
protected Config $talkConfig,
) {
}
#[\Override]
public function getName(): string {
return 'Regenerate signaling keys';
}
#[\Override]
public function run(IOutput $output): void {
$alg = $this->talkConfig->getSignalingTokenAlgorithm();
if ($alg === 'ES384') {
try {
$this->talkConfig->getSignalingTicket(2, null);
} catch (\Exception $e) {
$this->appConfig->setAppValue('signaling_token_privkey_' . strtolower($alg), '');
$this->appConfig->setAppValue('signaling_token_pubkey_' . strtolower($alg), '');
$this->talkConfig->getSignalingTokenPrivateKey($alg);
}
}
}
}