This commit is contained in:
swrup 2026-02-26 18:19:45 +01:00
parent 92fa4e12a4
commit fb839a1346

View file

@ -165,7 +165,7 @@ module Auditors = struct
() ()
| Some auditor -> | Some auditor ->
if Timestamp.geq auditor.last_change validity_start then if Timestamp.geq auditor.last_change validity_start then
Error "replay attack on enable-auditor" Error "replay detected on enable-auditor"
else else
let+ () = Pg.update_auditor db_conn auditor |> unwrap_err_caqti in let+ () = Pg.update_auditor db_conn auditor |> unwrap_err_caqti in
Logs.info (fun m -> m "updated auditor"); Logs.info (fun m -> m "updated auditor");
@ -200,7 +200,7 @@ module Auditors_disable = struct
| None -> Error "auditor not found" | None -> Error "auditor not found"
| Some auditor -> ( | Some auditor -> (
if Timestamp.geq auditor.last_change validity_end then if Timestamp.geq auditor.last_change validity_end then
Error "replay attack on disable-auditor" Error "replay detected on disable-auditor"
else else
match auditor.is_active with match auditor.is_active with
| false -> | false ->
@ -452,7 +452,7 @@ module Wire = struct
() ()
| Some (wire, _is_active, last_change) -> | Some (wire, _is_active, last_change) ->
if Timestamp.geq last_change validity_start then if Timestamp.geq last_change validity_start then
Error "replay attack on enable-wire" Error "replay detected on enable-wire"
else else
let+ () = let+ () =
Pg.update_wire db_conn ~is_active:true ~last_change:validity_start Pg.update_wire db_conn ~is_active:true ~last_change:validity_start
@ -491,7 +491,7 @@ module Wire_disable = struct
| None -> Error "wire not found" | None -> Error "wire not found"
| Some (wire, _is_active, last_change) -> | Some (wire, _is_active, last_change) ->
if Timestamp.geq last_change validity_end then if Timestamp.geq last_change validity_end then
Error "replay attack on disable-wire" Error "replay detected on disable-wire"
else else
let+ () = let+ () =
Pg.update_wire db_conn ~is_active:false ~last_change:validity_end Pg.update_wire db_conn ~is_active:false ~last_change:validity_end