oydid 0.9.4 → 0.9.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0f96270f4b2465c3dadb499841094e20c27c1e6512e18f69c2e2f7dbb2c6559f
-  data.tar.gz: 0aff913041f3105b4569c41c88918439b50754431e24c85e51197f851fd436d9
+  metadata.gz: 3aa2cc9a77716310c41f0bda9dae80ca4939602b778384c79d874e63e8a27000
+  data.tar.gz: cef9d037771c87c0bb4fb3614696c53c6a4b9d358f016f074defc37d88c810bd
 SHA512:
-  metadata.gz: 2505aeb0d16fc4a7786b24bbd1dcd607e7ac71122738ddc0bff9c6880d813813c5e6f2c134977a4bbf92b765565b8899822ae5d66dfe1977f214b89960ed6733
-  data.tar.gz: 49b7a640acf6793d33a504b45c4f69b30767a86d95fe4f7fd3236c26e4494456ccf4e799effe12c856b85a2ab675fa9887664c934bdcdd93710381466af27145
+  metadata.gz: 43b1ef66a0a911c316a9c0a20d5018595ece344545faf4b986040210b10245f3557da15c5ade1681402ad816d918c75fd788fae5d788a5ba8a2469a39e5b7ee1
+  data.tar.gz: c08146faf1769b6f782e50bbd23468629e7a9069c9e20e9c6bee90cf0dce9a68f494aeceeb57b23d972bd331a73c1643a58bcac91cb73df2238eff33df0061e5

data/VERSION

@@ -1 +1 @@
-0.9.4
+0.9.5

data/lib/oydid/log.rb

@@ -90,6 +90,21 @@ class Oydid
         end
     end
 
+    # collapse byte-identical log entries (keep first), keyed on the entry hash
+    # that `previous` references resolve to. A replayed CREATE or tangling
+    # TERMINATE would otherwise trip dag_did's CREATE/terminate counts and make
+    # the DID unresolvable - reachable through the unauthenticated append path
+    # with no signing key. Genuinely distinct fork entries (different hash) are
+    # kept and still fail closed as ambiguous.
+    def self.dedup_log(logs)
+        return logs unless logs.is_a?(Array)
+        seen = {}
+        logs.select do |el|
+            key = (canonical(el.slice("ts","op","doc","sig","previous")) rescue el.inspect)
+            seen.key?(key) ? false : (seen[key] = true)
+        end
+    end
+
     def self.dag_did(logs, options)
         dag = DAG.new
         dag_log = []

data/lib/oydid.rb

@@ -142,6 +142,14 @@ class Oydid
                 log_hash = hash_split[0]
                 log_location = hash_split[1]
             end
+            # D11: the log reference may carry its location as %40 (the
+            # W3C-conform form of @); split on both, exactly as the DID split
+            # above does.
+            if log_hash.include?(CGI.escape LOCATION_PREFIX)
+                hash_split = log_hash.split(CGI.escape LOCATION_PREFIX)
+                log_hash = hash_split[0]
+                log_location = hash_split[1]
+            end
         end
         if log_location == ""
             log_location = DEFAULT_LOCATION
@@ -152,6 +160,7 @@ class Oydid
         if log_array.nil?
             return [nil, msg]
         else
+            log_array = dedup_log(log_array)
             if options[:trace]
                 puts " .. Log retrieved"
             end

data/spec/oydid_spec.rb

@@ -646,6 +646,37 @@ describe "OYDID handling" do
     end
   end
 
+  # SECURITY regression: the append endpoint is unauthenticated, so a byte-identical
+  # log entry can be replayed with no signing key. A duplicated CREATE trips dag_did's
+  # "wrong number of CREATE entries" and a duplicated tangling TERMINATE its terminate
+  # count, making the DID unresolvable. dedup_log collapses byte-identical replays
+  # (keep-first) at ingestion; genuinely distinct fork entries survive and still fail
+  # closed as ambiguous.
+  describe "dedup_log collapses byte-identical replayed entries" do
+    let(:create_e) { { "ts" => 1, "op" => 2, "doc" => "zCreate", "sig" => "z", "previous" => [] } }
+    let(:term_e)   { { "ts" => 1, "op" => 0, "doc" => "zTerm",   "sig" => "z", "previous" => [] } }
+
+    it "removes a byte-identical duplicate, keeping the first" do
+      deduped = Oydid.dedup_log([create_e, term_e, create_e.dup])
+      expect(deduped.length).to eq 2
+      expect(deduped.count { |e| e["op"] == 2 }).to eq 1
+    end
+
+    it "lets a de-duplicated log resolve where the raw one fails" do
+      logs = [create_e, term_e, create_e.dup]
+      expect(Oydid.dag_did(logs, { silent: true }).last).to match(/wrong number of CREATE/)
+      dag, create_index, _t, msg = Oydid.dag_did(Oydid.dedup_log(logs), { silent: true })
+      expect(msg).to eq ""
+      expect(dag).not_to be_nil
+      expect(create_index).to eq 0
+    end
+
+    it "keeps genuinely distinct entries (a real fork is not collapsed)" do
+      fork = create_e.merge("doc" => "zCreate2")
+      expect(Oydid.dedup_log([create_e, fork, term_e]).length).to eq 3
+    end
+  end
+
   # a broken repository (5xx) has to stay distinguishable from a DID that is
   # not stored there - otherwise the caller reports "not found" and thereby
   # claims the identifier never existed

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: oydid
 version: !ruby/object:Gem::Version
-  version: 0.9.4
+  version: 0.9.5
 platform: ruby
 authors:
 - Christoph Fabianek
 bindir: bin
 cert_chain: []
-date: 2026-09-01 00:00:00.000000000 Z
+date: 2026-09-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: simple_dag