Skip to content

feat!: explicit opt-in for config update #5369#5390

Merged
0x009922 merged 1 commit intohyperledger-iroha:mainfrom
0x009922:5369-allow-config-update
May 1, 2025
Merged

feat!: explicit opt-in for config update #5369#5390
0x009922 merged 1 commit intohyperledger-iroha:mainfrom
0x009922:5369-allow-config-update

Conversation

@0x009922
Copy link
Copy Markdown
Contributor

@0x009922 0x009922 commented Apr 9, 2025

Closes #5369

Summary:

Config Changes

Added new parameter - torii.allow_config_update (boolean, default false)

Example in .toml:

[torii]
allow_config_update = true

Example in Env:

ALLOW_CONFIG_UPDATE=true

API Changes

POST /configuration now returns 403 Forbidden if torii.allow_config_update is not set to true.

@0x009922 0x009922 added api-changes Changes in the API for client libraries config-changes Changes in configuration and start up of the Iroha Security This issue asks for improved security labels Apr 9, 2025
@0x009922 0x009922 self-assigned this Apr 9, 2025
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 9, 2025

@BAStos525

dima74
dima74 previously approved these changes Apr 18, 2025
s8sato
s8sato previously approved these changes Apr 21, 2025
+ some residuals from hyperledger-iroha#5384

Signed-off-by: 0x009922 <43530070+0x009922@users.noreply.github.com>
@0x009922 0x009922 dismissed stale reviews from s8sato and dima74 via 569c9bc April 30, 2025 03:44
@0x009922 0x009922 force-pushed the 5369-allow-config-update branch from bd99025 to 569c9bc Compare April 30, 2025 03:44
@0x009922 0x009922 requested review from aoyako, dima74 and s8sato April 30, 2025 03:44
@0x009922 0x009922 merged commit 126432d into hyperledger-iroha:main May 1, 2025
9 of 12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

api-changes Changes in the API for client libraries config-changes Changes in configuration and start up of the Iroha Security This issue asks for improved security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

POST /configuration is not guarded

3 participants