Dawid Cichuta
Dawid Cichuta
I had the same problem so I built small lib checking MIME type of given file: https://gist.github.com/cichaczem/c3fb262b7cd284d75a46a77d1ff6506d
Partially related to https://github.com/orgs/worldcoin/projects/4/views/1?filterQuery=stat&pane=issue&itemId=26170286
Open questions: - Does anyone rely on `/insertIdentity` return value? - We want to change the response of `/inclusionProof` when identity was not processed yet. What will it break?
The only sensitive environmental variable in the sequencer setup is `ETHEREUM_PROVIDER`. If it leaks out, an attacker can run a DDoS.
I started the conversation with infra team
Notes: - [Adding a new prover](https://github.com/worldcoin/semaphore-mtb-deploy/pull/17/files) - [Adding a new sequencer](https://github.com/worldcoin/signup-sequencer-deploy/pull/23/files) - Missing - Basic auth setup - Subdomain creation
@kustosz already implemented improvements in [semaphore-rs](https://github.com/worldcoin/semaphore-rs/pull/38) and [sequencer](https://github.com/worldcoin/signup-sequencer/pull/483)
Related [prover task](https://github.com/orgs/worldcoin/projects/4/views/1?pane=issue&itemId=16701302)
It's in progress on the Infrastructure side. Keeping it as an item on our end to tracking purposes
Archiving because we have a different solution ready.