Skip to content

Reprint public key management - #10

Merged
fredrikekelund merged 11 commits into
trunkfrom
reprint-public-key-auth
Oct 8, 2026
Merged

fredrikekelund merged 11 commits into
trunkfrom
reprint-public-key-auth

Conversation

@fredrikekelund

Copy link
Copy Markdown
Contributor

Reprint is moving to a public-key auth model instead of using shared HMAC secrets. This PR updates the Reprint dependency and adds a few key tools for managing public keys through the plugin:

  1. Most notably, a /wpcom-migration/v1/reprint/install-public-key API endpoint. As the name suggests, it inserts a new public key. Authentication is the same as for the /wpcom-migration/v1/reprint/rotate-export-secret endpoint, i.e., the request needs to be signed with a Jetpack token or a local user credential (e.g., an application password) by a user with an administrator role.
  2. UI controls for managing public tokens on the manual screen.

fredrikekelund and others added 7 commits October 6, 2026 15:46
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Exports are now verified by Reprint's RequestAuthenticator, which
accepts the installed key or the shared secret, whichever the host
supports.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@fredrikekelund fredrikekelund self-assigned this Oct 7, 2026
fredrikekelund and others added 4 commits October 7, 2026 15:21
The screen gets a public key textarea and a table with the enrolled
key's id and a Remove button, modelled on the Reprint Server plugin.
Remove secret now removes only the secret, so each credential is
managed on its own.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Export errors now carry Reprint's reason code, and not_configured
answers with a 503, as the Reprint Server plugin does. Without the
reason, the client blamed an outdated plugin for an unknown key.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@fredrikekelund
fredrikekelund merged commit f52a0e9 into trunk Oct 8, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant