Resolve "x-set-fingerprint sets empty fingerprint-value in subscription if there is an accidental line-break between E-Mail and Fingerprint" (!209) · Merge requests · schleuder / schleuder

ng requested to merge 360-setting-fingerprint-without-fingerprint into master Jul 15, 2018

Check for a valid fingerprint as argument and do not accept an empty fingerprint. This will not anymore allow to unset a fingerprint through the SET-FINGERPRINT. This functionality will be superseeded by another keyword.

As part of that fix, wie centralize checking for a valid fingerpint and constrain the check to be either 32 (v3) or 40 (v4) characters long.

Additionally, we introduce the UNSET-FINGERPRINT keyword. Using the new introduced keyword an admin can now remove the linked fingerprint from a subscription. A subscription can only remove the fingerprint of themselves.

To unset their own fingerprint admins must additionally pass the argument force.

Requires update of docs

Resolve "x-set-fingerprint sets empty fingerprint-value in subscription if there is an accidental line-break between E-Mail and Fingerprint"

Merge request reports