fix: persist Ed25519 signing key to survive server restarts
All checks were successful
CI / build (push) Successful in 2m8s
CI / cleanup-branch (push) Has been skipped
CI / docker (push) Successful in 50s
CI / deploy-feature (push) Has been skipped
CI / deploy (push) Successful in 54s

The keypair was generated ephemerally on each startup, causing agents
to reject all commands after a server restart (signature mismatch).
Now persisted to PostgreSQL server_config table and restored on startup.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
hsiegeln
2026-04-03 17:13:40 +02:00
parent 670e458376
commit 81f13396a0
4 changed files with 88 additions and 10 deletions

View File

@@ -29,7 +29,7 @@ class SsePayloadSignerTest {
@BeforeEach
void setUp() {
signingService = new Ed25519SigningServiceImpl();
signingService = Ed25519SigningServiceImpl.ephemeral();
objectMapper = new ObjectMapper();
signer = new SsePayloadSigner(signingService, objectMapper);
}

View File

@@ -22,7 +22,7 @@ class Ed25519SigningServiceTest {
@BeforeEach
void setUp() {
signingService = new Ed25519SigningServiceImpl();
signingService = Ed25519SigningServiceImpl.ephemeral();
}
@Test