atomic-server

atomic-server copied to clipboard

Remove openssl dependency - use Rustls

4

I think (although I'm not _entirely_ sure) that OpenSSL is the only runtime dependency of `atomic-server`. It's required only for the HTTPS setup process, which is currently done using `acme_lib`....

joepio

private key of default server agent is stored in cleartext

3

`atomic-server` stores password in cleartext in its config file. That may be acceptable (or even needed) for some scenarios, but please support secure storage - and preferably by default and...

jonassmedegaard

Let's consider what it would take to give users / organisations their own store. Relates to #481 Some considerations: - Tenants must only get access to their own data -...

joepio

_This issue describes a potential attack for a feature not implemented, at this time._ Atomic-server uses the `is-a` property to check what classes a Resource has. Depending on this, functionality...

joepio

See https://github.com/tauri-apps/tauri/discussions/2684 Seems like I should use `RunEvent::WindowEvent::CloseRequested`

joepio

generated .env file stored in current directory

9

Running command `atomic-server setup-env` stores a file with a specific name in current directory. I find that a bad default behaviour. There is a real risk of "littering" - i.e....

jonassmedegaard

generated .env file contains typo and lack format notice

1

Command `atomic-server setup-env` generates a file `.env`. Nice! That generated file contains a typo on first line, however: runnign -> running. Also, and more important, it is undocumented how exactly...

jonassmedegaard

Although most of the data-browser functionality is covered by Atomic-Data-Browser end-to-end tests, the desktop GUI isn't tested at all. That's where the new Tauri webdriver / selenium tools could come...

joepio

Commits are not tested in the server, even though there are quite a bit of things that could go wrong. They _are_ tested in the end-to-end tests, though, but these...

joepio

Improve performance of very large collections - count expensive (and inaccurate, atm)

1

The [`/commits` collection](https://atomicdata.dev/commits) is almost 4000 resources big. Getting a page takes about 200ms. I think the culprit is the `counts` field, because the server iterates over _all_ resources that...

joepio