Esta página fue traducida por una máquina y aún no ha sido revisada por una persona. El inglés es la referencia; las correcciones son bienvenidas en GitHub. GitHub

Cookwala / SDK y escenarios / 052

Read the recall list and try to verify the example recall

Catalogs publish signed recalls; executors poll them and refuse recalled revisions. The reference hub has none to publish. The example recall is signed, and verifying it needs the issuer's key record, which this repository does not ship.

Audiencia: regulator · Objetivo: Hacer que las personas estén más sanas · Nivel: beginner

Leer primero: /docs/CORE/ /docs/HUB/

Pasos

The reference hub publishes an empty recall list. recalls
Verify the example recall with no key records. The signature names a key id; without its record the result is unknown_key, not ok. A refusal to trust is a result. verify
The content hash of the recall, computed without the signature field, is what the signature covers. hash

Resultado

You know where recalls come from and that verification without a key record fails safely. Next: scenario 054 verifies documents against real key records from the conformance vectors.

Línea de comandos

cookwala hub --recipes examples --speed 200
curl -s http://localhost:7878/v1/recalls
cookwala verify examples/core/recall.json
cookwala hash examples/core/recall.json

Salida grabada

Estado: ok

[1] recalls: []
[2] verify: {"ok": false, "reason": "unknown_key"}
[3] hash: {"hash": "sha256:690225c63501e33d8bc268203fa45cca9a23c43b717e4b2eccc2018f00770bb0"}

Código

Ejecutar: python scenarios/out/052-read-recalls-and-check-the-signed-example-recall/python.py

# Scenario 052: Read the recall list and try to verify the example recall
# Catalogs publish signed recalls; executors poll them and refuse recalled revisions. The reference hub has none to publish. The example recall is signed, and verifying it needs the issuer's key record, which this repository does not ship.
# Run a hub first: python hub/cookwala_hub.py --recipes examples
import json, os
from cookwala.client import CookwalaClient, CookwalaProblem

def load(path):
    with open(path, encoding="utf-8") as f:
        return json.load(f)

def pick(obj, path):
    for part in path.replace("]", "").replace("[", ".").split("."):
        obj = obj[int(part)] if part.isdigit() else (len(obj) if part == "length" else obj.get(part))
    return obj

c = CookwalaClient(os.environ.get("COOKWALA_HUB", "http://localhost:7878"))


# Step 1: The reference hub publishes an empty recall list.
recalls = c.recalls()
assert pick(recalls, "length") == 0, pick(recalls, "length")
print("ok", "length", "=", 0)

# Step 2: Verify the example recall with no key records. The signature names a key id; without its record the result is unknown_key, not ok. A refusal to trust is a result.
v = c.verify(load("examples/core/recall.json"), [])
assert pick(v, "ok") == False, pick(v, "ok")
print("ok", "ok", "=", False)
assert pick(v, "reason") == "unknown_key", pick(v, "reason")
print("ok", "reason", "=", "unknown_key")

# Step 3: The content hash of the recall, computed without the signature field, is what the signature covers.
h = c.hash(load("examples/core/recall.json"))
assert pick(h, "hash") == "sha256:690225c63501e33d8bc268203fa45cca9a23c43b717e4b2eccc2018f00770bb0", pick(h, "hash")
print("ok", "hash", "=", "sha256:690225c63501e33d8bc268203fa45cca9a23c43b717e4b2eccc2018f00770bb0")

print("scenario complete")

scenarios/052-read-recalls-and-check-the-signed-example-recall.json