Feature request - Specify checksum url instead of value - support protocol handlers in sources fields:

[ieugen]

Hi,

I'm working with flatpak. I believe it would be great to ALSO be able specify the archive checksum URL instead of the value.

Here is an example of what I have in mind:

            "sources": [
                {
                    "type": "archive",
                    "url": "https://repo1.maven.org/maven2/org/flywaydb/flyway-commandline/6.0.0/flyway-commandline-6.0.0-linux-x64.tar.gz",
                    "sha1": "https://repo1.maven.org/maven2/org/flywaydb/flyway-commandline/6.0.0/flyway-commandline-6.0.0-macosx-x64.tar.gz.sha1"
                }

The people who publish the artifact also publish md5 and shaXXX files. I would like to be able to use those links if they are available via a supported protocol like http:// or https:// .

If the schema is one of the above, flatpak-builder should download the file and use it's contents as the value for the checksum.

[TingPing]

Well a benefit of the checksum being in the manifest is you actually know when things change. If its a remote resource they can both change.

[ieugen]

Sure. I agree with you. I think of it as a feature. To me I trust the upstream.

Does the flatpak save the hash if the archive? If that happens, things are ok.

This feature provides easier maintenance.