Skip to content

[stable33] fix(federation): compare tokens in the shared secret job - #66418

Open
backportbot[bot] wants to merge 1 commit into
stable33from
backport/66359/stable33
Open

backportbot[bot] wants to merge 1 commit into
stable33from
backport/66359/stable33

Conversation

@backportbot

@backportbot backportbot Bot commented Nov 6, 2026 •

Copy link
Copy Markdown

Backport of #66359

Warning, This backport's changes differ from the original and might be incomplete ⚠️

Todo

  • Review and resolve any conflicts
  • Review and verify the backported changes
  • Amend HEAD commit to remove the line stating to skip CI

Learn more about backports at https://docs.nextcloud.com/server/stable/go.php?to=developer-backports.

@backportbot
backportbot Bot requested review from skjnldsv, susnux and szaimen November 6, 2026 20:05
@backportbot backportbot Bot added bug 3. to review Waiting for reviews AI assisted labels Nov 6, 2026
@backportbot backportbot Bot added this to the Nextcloud 33.0.11 milestone Nov 6, 2026
When both servers start the shared secret exchange, the one with the
greater token asks for the secret. Do this check in the GetSharedSecret
job instead of the request handler, so the handler only checks the
server and queues the job. Tokens are generated with 16 characters, so
refuse anything longer than 64.

Assisted-by: ClaudeCode:claude-opus-5-5
Signed-off-by: John Molakvoæ <14975046+skjnldsv@users.noreply.github.com>
@susnux
susnux force-pushed the backport/66359/stable33 branch from 4e9b823 to 874b6c7 Compare November 6, 2026 20:09
@susnux
susnux marked this pull request as ready for review November 6, 2026 20:09
@susnux
susnux requested a review from a team as a code owner November 6, 2026 20:09
@susnux
susnux requested review from leftybournes and provokateurin and removed request for a team November 6, 2026 20:09
This was referenced Nov 10, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants