Require signature rejection in predecessor acceptance
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-05 17:58:01 +02:00
parent 6f89388901
commit ae27a42b18

View file

@ -27,7 +27,7 @@ if token:
old_rejected=None
if x.get('old_token'):
try: _verify_preflight_token(x['old_token'])
except RenamePreconditionFailed: old_rejected=True
except RenamePreconditionFailed as e: old_rejected=str(e)=='Invalid repository rename preflight token'
else: old_rejected=False
print(json.dumps({'key_matches':hmac.compare_digest(settings.repository_rename_preflight_secret or '',x['key']), 'signed_preflight_valid':valid, 'old_token_rejected':old_rejected, 'blockers':[b.get('code') for b in report['blockers']], 'token':token, 'health':health.get('instance_role')=='primary' and health.get('instance_label')=='railiance01'}))
'''