Skip to main content

update_credentials

didbot_serve::tree::credentials

Function update_credentials 

Source 
pub(crate) async fn update_credentials(
    __arg0: State<AppState>,
    peer: Peer,
    headers: HeaderMap,
    __arg3: XrpcBody,
) -> Response
Expand description

POST /xrpc/bot.did.updateCredentials

An operator session cookie makes the caller the operator. Otherwise the bearer is the account’s own JWT, and the account’s change passes the gates a new session passes: the e-stop’s issuance gate, readiness, and the per-address budget createAccount and createSession share. The operator’s change passes none of them, so a leaked key is replaced while the server is stopped.