@harperfast/harper 5.0.1 → 5.0.3

package/security/keys.js

@@ -125,7 +125,7 @@ function getCertTable() {
 }
 
 async function getReplicationCert() {
-	const SNICallback = createTLSSelector('operations-api');
+	const SNICallback = createTLSSelector('replication');
 	const secureTarget = {
 		secureContexts: null,
 		setSecureContext: (_ctx) => {},
@@ -238,7 +238,7 @@ function loadCertificates() {
 
 								promise = certificateTable.put({
 									name: certCn,
-									uses: config.uses ?? ['https', ...(configKey.includes('operations') ? ['operations'] : [])],
+									uses: config.uses ?? [configKey.includes('operations') ? ['operations-api'] : []],
 									ciphers: config.ciphers,
 									certificate: certificatePem,
 									private_key_name,
@@ -351,7 +351,7 @@ function certExtensions() {
 async function createCertificateTable(cert, caCert) {
 	await setCertTable({
 		name: getThisNodeName(),
-		uses: ['https', 'wss'],
+		uses: ['replication'],
 		certificate: cert,
 		private_key_name: 'privateKey.pem',
 		is_authority: false,
@@ -360,7 +360,7 @@ async function createCertificateTable(cert, caCert) {
 
 	await setCertTable({
 		name: caCert.subject.getField('CN').value,
-		uses: ['https', 'wss'],
+		uses: [],
 		certificate: pki.certificateToPem(caCert),
 		private_key_name: 'privateKey.pem',
 		is_authority: true,
@@ -600,7 +600,7 @@ async function reviewSelfSignedCert() {
 
 		await setCertTable({
 			name: hdbCa.subject.getField('CN').value,
-			uses: ['https'],
+			uses: [],
 			certificate: pki.certificateToPem(hdbCa),
 			private_key_name: keyName,
 			is_authority: true,
@@ -621,7 +621,7 @@ async function reviewSelfSignedCert() {
 		const newPublicCert = await generateCertificates(pki.privateKeyFromPem(caAndKey.private_key), publicKey, hdbCa);
 		await setCertTable({
 			name: certName,
-			uses: ['https', 'operations', 'wss'],
+			uses: ['replication'],
 			certificate: newPublicCert,
 			is_authority: false,
 			private_key_name: caAndKey.ca.private_key_name,
@@ -755,7 +755,7 @@ function createTLSSelector(type, mtlsOptions) {
 							}
 							let quality = cert.is_self_signed ? 1 : 3;
 							// prefer operations certificates for operations API
-							if (cert.uses?.includes(type)) quality += 1;
+							if (cert.uses?.includes(type)) quality += 3;
 
 							const private_key = getPrivateKeyByName(cert.private_key_name);
 

package/security/user.ts

@@ -258,14 +258,16 @@ async function userInfo(body): Promise<string | User> {
 	}
 
 	let user = _.cloneDeep(body.hdb_user);
-	let roleData = await search.searchByHash({
-		schema: 'system',
-		table: 'hdb_role',
-		hash_values: [user.role.id],
-		get_attributes: ['*'],
-	});
+	let roleData =
+		user.role &&
+		(await search.searchByHash({
+			schema: 'system',
+			table: 'hdb_role',
+			hash_values: [user.role.id],
+			get_attributes: ['*'],
+		}));
 
-	user.role = roleData[0];
+	user.role = roleData?.[0];
 	delete user.password;
 	delete user.refresh_token;
 	delete user.hash;
@@ -429,7 +431,7 @@ async function getSuperUser(): Promise<User | undefined> {
 		await setUsersWithRolesCache();
 	}
 	for (let [, user] of usersWithRolesMap) {
-		if (user.role.role === 'super_user') return user;
+		if (user.role?.role === 'super_user') return user;
 	}
 }
 

package/server/itc/serverHandlers.js

@@ -46,10 +46,6 @@ async function schemaHandler(event) {
  */
 async function syncSchemaMetadata(msg) {
 	try {
-		// reset current read transactions to ensure that we are getting the very latest data
-		harperBridge.resetReadTxn(hdbTerms.SYSTEM_SCHEMA_NAME, hdbTerms.SYSTEM_TABLE_NAMES.TABLE_TABLE_NAME);
-		harperBridge.resetReadTxn(hdbTerms.SYSTEM_SCHEMA_NAME, hdbTerms.SYSTEM_TABLE_NAMES.ATTRIBUTE_TABLE_NAME);
-		harperBridge.resetReadTxn(hdbTerms.SYSTEM_SCHEMA_NAME, hdbTerms.SYSTEM_TABLE_NAMES.SCHEMA_TABLE_NAME);
 		// TODO: Eventually should indicate which database/table changed so we don't have to scan everything
 		let databases = resetDatabases();
 		if (msg.table && msg.database)

package/static/defaultConfig.yaml

@@ -24,7 +24,7 @@ analytics:
   aggregatePeriod: 60
   replicate: false
 applications:
-  lockdown: freeze
+  lockdown: freeze-after-load
   moduleLoader: vm
   dependencyLoader: auto
   allowedSpawnCommands: