diff options
| author | Claudomator Agent <agent@claudomator> | 2026-03-17 08:04:04 +0000 |
|---|---|---|
| committer | Claudomator Agent <agent@claudomator> | 2026-03-17 08:04:04 +0000 |
| commit | b9039dbf194f66738766cb4296ba6d141d6d433e (patch) | |
| tree | d76eae28d92ec34b2870e6400fcdf558c5063942 /internal/cli/serve.go | |
| parent | 94e45575a34e8672f8b405c54cabd8e524281fef (diff) | |
fix: validate VAPID public key on load, regenerate if swapped
The DB may contain keys generated before the swap fix, with the private
key stored as the public key. Add ValidateVAPIDPublicKey() and use it in
serve.go to detect and regenerate invalid stored keys on startup.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'internal/cli/serve.go')
| -rw-r--r-- | internal/cli/serve.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/internal/cli/serve.go b/internal/cli/serve.go index efac719..5677562 100644 --- a/internal/cli/serve.go +++ b/internal/cli/serve.go @@ -54,7 +54,7 @@ func serve(addr string) error { if cfg.VAPIDPublicKey == "" || cfg.VAPIDPrivateKey == "" { pub, _ := store.GetSetting("vapid_public_key") priv, _ := store.GetSetting("vapid_private_key") - if pub == "" || priv == "" { + if pub == "" || priv == "" || !notify.ValidateVAPIDPublicKey(pub) { pub, priv, err = notify.GenerateVAPIDKeys() if err != nil { return fmt.Errorf("generating VAPID keys: %w", err) |