@ethernity-cloud/sdk-js 1.5.18 → 1.5.20

package/nodenithy/build/securelock/src/etny_session_exec.js

@@ -35,11 +35,22 @@ function sleep(ms) { return new Promise((r) => setTimeout(r, ms)); }
    enclave pushes for the trustedzone is SIGNED with its identity key, so the
    trustedzone authors metadata rows only from verified securelock material;
    everything read from the trustedzone is verified against the trustedzone's
-   registry certificate before it is trusted. */
+   registry certificate before it is trusted. Each signature covers
+   "<challenge>:<order_id>:<object>:" ahead of the data -- the task binding
+   the trustedzone forwarded in task.securelock, extended with the object's
+   own name -- so the trustedzone can refuse a session object captured from
+   another order, another run, or another sequence position. Without a
+   binding (older trustedzone) the bare data is signed, which that trustedzone
+   verifies. */
+
+function sessionBinding(app, baseName) {
+    return app.task_binding
+        ? `${app.task_binding.challenge}:${app.task_binding.order_id}:${baseName}:` : '';
+}
 
 async function pushSignedForTrustedzone(app, data, baseName) {
     await app.encryptFileAndPushToSwiftStream(data, baseName);
-    const sigHex = etny_crypto.signData(app.privateKeyMaterial(), data);
+    const sigHex = etny_crypto.signData(app.privateKeyMaterial(), sessionBinding(app, baseName) + data);
     await app.encryptFileAndPushToSwiftStream(sigHex, baseName + '.sig');
 }
 

package/nodenithy/build/securelock/src/securelock.js.tmpl

@@ -515,7 +515,23 @@ class EtnySecureLock {
     // input carries no checksum (has_checksum === false) and is skipped. Kept
     // identical across securelock / trustedzone / validator so all three agree.
     async validateClientPayload(payload_data, input_data) {
-        await this.getDORequestMetadata();
+        // The order metadata comes from the chain; a transient RPC failure
+        // must end in a signed failure result the trustedzone can hand over,
+        // not in a task that produces nothing until the trustedzone times out.
+        const maxRetries = 5;
+        for (let attempt = 1; ; attempt++) {
+            try {
+                await this.getDORequestMetadata();
+                break;
+            } catch (e) {
+                if (attempt === maxRetries) {
+                    this.task_code = TaskStatus.SYSTEM_ERROR;
+                    this.task_result = `Failed to fetch metadata after ${maxRetries} attempts: ${e && e.message ? e.message : e}`;
+                    this.is_valid_client_data = false;
+                    return;
+                }
+            }
+        }
 
         const pmeta = this._metadata.payload_metadata_obj;
         if (pmeta.has_checksum) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ethernity-cloud/sdk-js",
-  "version": "1.5.18",
+  "version": "1.5.20",
   "description": "A package to run ethernity cloud build scripts",
   "scripts": {
     "ecld-build": "cross-env node ./node_modules/@ethernity-cloud/sdk-js/build.js",