feat(planning): grille hebdomadaire complète avec API et filtres
- Connexion API via proxy Angular (résolution CORS, base path /api) - Import CSS ng-zorro global pour les modales et composants - Filtres Camion/Show câblés sur l'affichage de la grille - Camions affichés via TrucksService (linkés au show du même créneau) - Panneau de détails : spectacles + camions du jour sélectionné - Modale de création de spectacle stylisée avec fond et centrage - Positionnement précis des events à la minute dans leur créneau - Auto-scroll vers l'heure courante au chargement - Ligne "maintenant" sur la colonne du jour actuel - Régénération des services OpenAPI (nouveaux noms de types) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
-3
@@ -1,6 +1,3 @@
|
||||
import type { Entry } from '@sigstore/protobuf-specs/rekor/v2';
|
||||
import type { ProposedDSSEEntry } from '@sigstore/rekor-types';
|
||||
import type { SignatureContent } from '../shared.types';
|
||||
export declare const DSSE_API_VERSION_V1 = "0.0.1";
|
||||
export declare function verifyDSSETLogBody(tlogEntry: ProposedDSSEEntry, content: SignatureContent): void;
|
||||
export declare function verifyDSSETLogBodyV2(tlogEntry: Entry, content: SignatureContent): void;
|
||||
|
||||
+3
-52
@@ -1,10 +1,8 @@
|
||||
"use strict";
|
||||
Object.defineProperty(exports, "__esModule", { value: true });
|
||||
exports.DSSE_API_VERSION_V1 = void 0;
|
||||
exports.verifyDSSETLogBody = verifyDSSETLogBody;
|
||||
exports.verifyDSSETLogBodyV2 = verifyDSSETLogBodyV2;
|
||||
/*
|
||||
Copyright 2025 The Sigstore Authors.
|
||||
Copyright 2023 The Sigstore Authors.
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
@@ -19,11 +17,10 @@ See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
*/
|
||||
const error_1 = require("../error");
|
||||
exports.DSSE_API_VERSION_V1 = '0.0.1';
|
||||
// Compare the given dsse tlog entry to the given bundle
|
||||
// Compare the given intoto tlog entry to the given bundle
|
||||
function verifyDSSETLogBody(tlogEntry, content) {
|
||||
switch (tlogEntry.apiVersion) {
|
||||
case exports.DSSE_API_VERSION_V1:
|
||||
case '0.0.1':
|
||||
return verifyDSSE001TLogBody(tlogEntry, content);
|
||||
default:
|
||||
throw new error_1.VerificationError({
|
||||
@@ -32,26 +29,6 @@ function verifyDSSETLogBody(tlogEntry, content) {
|
||||
});
|
||||
}
|
||||
}
|
||||
// Compare the given dsse tlog entry to the given bundle. This function is
|
||||
// specifically for Rekor V2 entries.
|
||||
function verifyDSSETLogBodyV2(tlogEntry, content) {
|
||||
const spec = tlogEntry.spec?.spec;
|
||||
if (!spec) {
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_BODY_ERROR',
|
||||
message: `missing dsse spec`,
|
||||
});
|
||||
}
|
||||
switch (spec.$case) {
|
||||
case 'dsseV002':
|
||||
return verifyDSSE002TLogBody(spec.dsseV002, content);
|
||||
default:
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_BODY_ERROR',
|
||||
message: `unsupported version: ${spec.$case}`,
|
||||
});
|
||||
}
|
||||
}
|
||||
// Compare the given dsse v0.0.1 tlog entry to the given DSSE envelope.
|
||||
function verifyDSSE001TLogBody(tlogEntry, content) {
|
||||
// Ensure the bundle's DSSE only contains a single signature
|
||||
@@ -78,29 +55,3 @@ function verifyDSSE001TLogBody(tlogEntry, content) {
|
||||
});
|
||||
}
|
||||
}
|
||||
// Compare the given dsse v0.0.2 tlog entry to the given DSSE envelope.
|
||||
function verifyDSSE002TLogBody(spec, content) {
|
||||
// Ensure the bundle's DSSE only contains a single signature
|
||||
if (spec.signatures?.length !== 1) {
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_BODY_ERROR',
|
||||
message: 'signature count mismatch',
|
||||
});
|
||||
}
|
||||
const tlogSig = spec.signatures[0].content;
|
||||
// Ensure that the signature in the bundle's DSSE matches tlog entry
|
||||
if (!content.compareSignature(tlogSig))
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_BODY_ERROR',
|
||||
message: 'tlog entry signature mismatch',
|
||||
});
|
||||
// Ensure the digest of the bundle's DSSE payload matches the digest in the
|
||||
// tlog entry
|
||||
const tlogHash = spec.payloadHash?.digest || Buffer.from('');
|
||||
if (!content.compareDigest(tlogHash)) {
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_BODY_ERROR',
|
||||
message: 'DSSE payload hash mismatch',
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
-3
@@ -1,6 +1,3 @@
|
||||
import { Entry } from '@sigstore/protobuf-specs/rekor/v2';
|
||||
import type { ProposedHashedRekordEntry } from '@sigstore/rekor-types';
|
||||
import type { SignatureContent } from '../shared.types';
|
||||
export declare const HASHEDREKORD_API_VERSION_V1 = "0.0.1";
|
||||
export declare function verifyHashedRekordTLogBody(tlogEntry: ProposedHashedRekordEntry, content: SignatureContent): void;
|
||||
export declare function verifyHashedRekordTLogBodyV2(tlogEntry: Entry, content: SignatureContent): void;
|
||||
|
||||
+2
-45
@@ -1,10 +1,8 @@
|
||||
"use strict";
|
||||
Object.defineProperty(exports, "__esModule", { value: true });
|
||||
exports.HASHEDREKORD_API_VERSION_V1 = void 0;
|
||||
exports.verifyHashedRekordTLogBody = verifyHashedRekordTLogBody;
|
||||
exports.verifyHashedRekordTLogBodyV2 = verifyHashedRekordTLogBodyV2;
|
||||
/*
|
||||
Copyright 2025 The Sigstore Authors.
|
||||
Copyright 2023 The Sigstore Authors.
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
@@ -19,11 +17,10 @@ See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
*/
|
||||
const error_1 = require("../error");
|
||||
exports.HASHEDREKORD_API_VERSION_V1 = '0.0.1';
|
||||
// Compare the given hashedrekord tlog entry to the given bundle
|
||||
function verifyHashedRekordTLogBody(tlogEntry, content) {
|
||||
switch (tlogEntry.apiVersion) {
|
||||
case exports.HASHEDREKORD_API_VERSION_V1:
|
||||
case '0.0.1':
|
||||
return verifyHashedrekord001TLogBody(tlogEntry, content);
|
||||
default:
|
||||
throw new error_1.VerificationError({
|
||||
@@ -32,26 +29,6 @@ function verifyHashedRekordTLogBody(tlogEntry, content) {
|
||||
});
|
||||
}
|
||||
}
|
||||
// Compare the given hashedrekor tlog entry to the given bundle. This function is
|
||||
// specifically for Rekor V2 entries.
|
||||
function verifyHashedRekordTLogBodyV2(tlogEntry, content) {
|
||||
const spec = tlogEntry.spec?.spec;
|
||||
if (!spec) {
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_BODY_ERROR',
|
||||
message: `missing dsse spec`,
|
||||
});
|
||||
}
|
||||
switch (spec.$case) {
|
||||
case 'hashedRekordV002':
|
||||
return verifyHashedrekord002TLogBody(spec.hashedRekordV002, content);
|
||||
default:
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_BODY_ERROR',
|
||||
message: `unsupported version: ${spec.$case}`,
|
||||
});
|
||||
}
|
||||
}
|
||||
// Compare the given hashedrekord v0.0.1 tlog entry to the given message
|
||||
// signature
|
||||
function verifyHashedrekord001TLogBody(tlogEntry, content) {
|
||||
@@ -72,23 +49,3 @@ function verifyHashedrekord001TLogBody(tlogEntry, content) {
|
||||
});
|
||||
}
|
||||
}
|
||||
// Compare the given hashedrekord v0.0.2 tlog entry to the given message
|
||||
// signature
|
||||
function verifyHashedrekord002TLogBody(spec, content) {
|
||||
// Ensure that the bundles message signature matches the tlog entry
|
||||
const tlogSig = spec.signature?.content || Buffer.from('');
|
||||
if (!content.compareSignature(tlogSig)) {
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_BODY_ERROR',
|
||||
message: 'signature mismatch',
|
||||
});
|
||||
}
|
||||
// Ensure that the bundle's message digest matches the tlog entry
|
||||
const tlogHash = spec.data?.digest || Buffer.from('');
|
||||
if (!content.compareDigest(tlogHash)) {
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_BODY_ERROR',
|
||||
message: 'digest mismatch',
|
||||
});
|
||||
}
|
||||
}
|
||||
|
||||
-2
@@ -1,5 +1,3 @@
|
||||
import type { TransparencyLogEntry } from '@sigstore/bundle';
|
||||
import type { SignatureContent } from '../shared.types';
|
||||
import { TLogAuthority } from '../trust';
|
||||
export declare function verifyTLogBody(entry: TransparencyLogEntry, sigContent: SignatureContent): void;
|
||||
export declare function verifyTLogInclusion(entry: TransparencyLogEntry, tlogAuthorities: TLogAuthority[]): void;
|
||||
|
||||
+3
-48
@@ -1,7 +1,6 @@
|
||||
"use strict";
|
||||
Object.defineProperty(exports, "__esModule", { value: true });
|
||||
exports.verifyTLogBody = verifyTLogBody;
|
||||
exports.verifyTLogInclusion = verifyTLogInclusion;
|
||||
/*
|
||||
Copyright 2023 The Sigstore Authors.
|
||||
|
||||
@@ -17,46 +16,27 @@ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
*/
|
||||
const v2_1 = require("@sigstore/protobuf-specs/rekor/v2");
|
||||
const error_1 = require("../error");
|
||||
const dsse_1 = require("./dsse");
|
||||
const hashedrekord_1 = require("./hashedrekord");
|
||||
const intoto_1 = require("./intoto");
|
||||
const checkpoint_1 = require("./checkpoint");
|
||||
const merkle_1 = require("./merkle");
|
||||
const set_1 = require("./set");
|
||||
// Verifies that the given tlog entry matches the supplied signature content.
|
||||
function verifyTLogBody(entry, sigContent) {
|
||||
const { kind, version } = entry.kindVersion;
|
||||
const body = JSON.parse(entry.canonicalizedBody.toString('utf8'));
|
||||
// validate body
|
||||
if (kind !== body.kind || version !== body.apiVersion) {
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_BODY_ERROR',
|
||||
message: `kind/version mismatch - expected: ${kind}/${version}, received: ${body.kind}/${body.apiVersion}`,
|
||||
});
|
||||
}
|
||||
switch (kind) {
|
||||
switch (body.kind) {
|
||||
case 'dsse':
|
||||
// Rekor V1 and V2 use incompatible types so we need to branch here based on version
|
||||
if (version == dsse_1.DSSE_API_VERSION_V1) {
|
||||
return (0, dsse_1.verifyDSSETLogBody)(body, sigContent);
|
||||
}
|
||||
else {
|
||||
const entryRekorV2 = v2_1.Entry.fromJSON(body);
|
||||
return (0, dsse_1.verifyDSSETLogBodyV2)(entryRekorV2, sigContent);
|
||||
}
|
||||
return (0, dsse_1.verifyDSSETLogBody)(body, sigContent);
|
||||
case 'intoto':
|
||||
return (0, intoto_1.verifyIntotoTLogBody)(body, sigContent);
|
||||
case 'hashedrekord':
|
||||
// Rekor V1 and V2 use incompatible types so we need to branch here based on version
|
||||
if (version == hashedrekord_1.HASHEDREKORD_API_VERSION_V1) {
|
||||
return (0, hashedrekord_1.verifyHashedRekordTLogBody)(body, sigContent);
|
||||
}
|
||||
else {
|
||||
const entryRekorV2 = v2_1.Entry.fromJSON(body);
|
||||
return (0, hashedrekord_1.verifyHashedRekordTLogBodyV2)(entryRekorV2, sigContent);
|
||||
}
|
||||
return (0, hashedrekord_1.verifyHashedRekordTLogBody)(body, sigContent);
|
||||
/* istanbul ignore next */
|
||||
default:
|
||||
throw new error_1.VerificationError({
|
||||
@@ -65,28 +45,3 @@ function verifyTLogBody(entry, sigContent) {
|
||||
});
|
||||
}
|
||||
}
|
||||
function verifyTLogInclusion(entry, tlogAuthorities) {
|
||||
let inclusionVerified = false;
|
||||
if (isTLogEntryWithInclusionPromise(entry)) {
|
||||
(0, set_1.verifyTLogSET)(entry, tlogAuthorities);
|
||||
inclusionVerified = true;
|
||||
}
|
||||
if (isTLogEntryWithInclusionProof(entry)) {
|
||||
const checkpoint = (0, checkpoint_1.verifyCheckpoint)(entry, tlogAuthorities);
|
||||
(0, merkle_1.verifyMerkleInclusion)(entry, checkpoint);
|
||||
inclusionVerified = true;
|
||||
}
|
||||
if (!inclusionVerified) {
|
||||
throw new error_1.VerificationError({
|
||||
code: 'TLOG_MISSING_INCLUSION_ERROR',
|
||||
message: 'inclusion could not be verified',
|
||||
});
|
||||
}
|
||||
return;
|
||||
}
|
||||
function isTLogEntryWithInclusionPromise(entry) {
|
||||
return entry.inclusionPromise !== undefined;
|
||||
}
|
||||
function isTLogEntryWithInclusionProof(entry) {
|
||||
return entry.inclusionProof !== undefined;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user