fb0cc3e39d
Critical: - FR-01: Chain verification now supports key rotation via signed rotation records (soosef/key-rotation-v1 content type). Old single-signer invariant replaced with authorized-signers set. - FR-02: Carrier images stripped of EXIF metadata by default before steganographic encoding (strip_metadata=True). Prevents source location/device leakage. High priority: - FR-03: Session timeout (default 15min) + secure cookie flags (HttpOnly, SameSite=Strict, Secure when HTTPS) - FR-04: CSRF protection via Flask-WTF on all POST forms. Killswitch now requires password re-authentication. - FR-05: Collaborator trust store — trust_key(), get_trusted_keys(), resolve_attestor_name(), untrust_key() in KeystoreManager. - FR-06: Production WSGI server (Waitress) by default, Flask dev server only with --debug flag. - FR-07: Dead man's switch sends warning during grace period via local file + optional webhook before auto-purge. Medium: - FR-08: Geofence get_current_location() via gpsd for --here support. - FR-09: Batch attestation endpoint (/attest/batch) with SHA-256 dedup and per-file status reporting. - FR-10: Key backup tracking with last_backup_info() and is_backup_overdue() + backup_reminder_days config. - FR-11: Verification receipts signed with instance Ed25519 key (schema_version bumped to 2). - FR-12: Login rate limiting with configurable lockout (5 attempts, 15 min default). Nice-to-have: - FR-13: Unified `soosef status` pre-flight command showing identity, channel key, deadman, geofence, chain, and backup status. - FR-14: `soosef chain export` produces ZIP with JSON manifest, public key, and raw chain.bin for legal discovery. Tests: 157 passed, 1 skipped, 1 pre-existing flaky test. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
80 lines
2.7 KiB
Python
80 lines
2.7 KiB
Python
"""
|
|
Fieldkit blueprint — killswitch, dead man's switch, status dashboard.
|
|
"""
|
|
|
|
from auth import admin_required, get_username, login_required
|
|
from flask import Blueprint, flash, redirect, render_template, request, url_for
|
|
|
|
from soosef.audit import log_action
|
|
|
|
bp = Blueprint("fieldkit", __name__, url_prefix="/fieldkit")
|
|
|
|
|
|
@bp.route("/")
|
|
@login_required
|
|
def status():
|
|
"""Fieldkit status dashboard — all monitors and system health."""
|
|
from soosef.fieldkit.deadman import DeadmanSwitch
|
|
|
|
deadman = DeadmanSwitch()
|
|
return render_template(
|
|
"fieldkit/status.html",
|
|
deadman_status=deadman.status(),
|
|
)
|
|
|
|
|
|
@bp.route("/killswitch", methods=["GET", "POST"])
|
|
@admin_required
|
|
def killswitch():
|
|
"""Killswitch arming and firing UI."""
|
|
if request.method == "POST":
|
|
action = request.form.get("action")
|
|
if action == "fire" and request.form.get("confirm") == "CONFIRM-PURGE":
|
|
# Require password re-authentication for killswitch
|
|
from auth import verify_user_password
|
|
|
|
password = request.form.get("password", "")
|
|
username = get_username()
|
|
if not verify_user_password(username, password):
|
|
flash("Killswitch requires password confirmation.", "danger")
|
|
return render_template("fieldkit/killswitch.html")
|
|
|
|
from soosef.fieldkit.killswitch import PurgeScope, execute_purge
|
|
|
|
actor = username
|
|
result = execute_purge(PurgeScope.ALL, reason="web_ui")
|
|
outcome = "success" if result.fully_purged else "failure"
|
|
failed_steps = ", ".join(name for name, _ in result.steps_failed)
|
|
log_action(
|
|
actor=actor,
|
|
action="killswitch.fire",
|
|
target="all",
|
|
outcome=outcome,
|
|
source="web",
|
|
detail=(
|
|
f"steps_completed={len(result.steps_completed)} "
|
|
f"steps_failed={len(result.steps_failed)}"
|
|
+ (f" failed={failed_steps}" if failed_steps else "")
|
|
),
|
|
)
|
|
flash(
|
|
f"Purge executed: {len(result.steps_completed)} steps completed, "
|
|
f"{len(result.steps_failed)} failed",
|
|
"warning" if result.steps_failed else "success",
|
|
)
|
|
return redirect(url_for("fieldkit.status"))
|
|
|
|
return render_template("fieldkit/killswitch.html")
|
|
|
|
|
|
@bp.route("/deadman/checkin", methods=["POST"])
|
|
@login_required
|
|
def deadman_checkin():
|
|
"""Record a dead man's switch check-in."""
|
|
from soosef.fieldkit.deadman import DeadmanSwitch
|
|
|
|
deadman = DeadmanSwitch()
|
|
deadman.checkin()
|
|
flash("Check-in recorded.", "success")
|
|
return redirect(url_for("fieldkit.status"))
|